[Pkg-mozext-maintainers] Bug#975061: webext-debianbuttons: security field should not translate package names to upper case (only CVEs/DSAs/DLAs)

Paul Wise pabs at debian.org
Wed Nov 18 15:17:48 GMT 2020


Package: webext-debianbuttons
Version: 2.3-2
Severity: normal
File: /usr/share/webext/debian-buttons/icedeb.js

The security field should not translate package names to upper case
because the security tracker expects all package names in lower case.
The translation to upper case should only happen for CVEs/DSAs/DLA.

   $ grep -iC2 upper /usr/share/webext/debian-buttons/icedeb.js
       case 'security':
         clip = clip.replace(' ', '-');
         clip = clip.toUpperCase();
         url = 'https://security-tracker.debian.org/tracker/' + clip;
         break;

   $ w3m -dump https://security-tracker.debian.org/tracker/GLIBC | head -n3
   Not found

   Your query GLIBC matched no results.

   $ w3m -dump https://security-tracker.debian.org/tracker/glibc | head -n3
   Information on source package glibc

     • glibc in the Package Tracking System

-- System Information:
Debian Release: bullseye/sid
  APT prefers testing-debug
  APT policy: (900, 'testing-debug'), (900, 'testing'), (800, 'unstable-debug'), (800, 'unstable'), (790, 'buildd-unstable'), (700, 'experimental-debug'), (700, 'experimental'), (690, 'buildd-experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 5.9.0-2-amd64 (SMP w/4 CPU threads)
Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8), LANGUAGE=en_AU:en
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages webext-debianbuttons depends on:
ii  firefox      83.0-1
ii  firefox-esr  78.5.0esr-1

webext-debianbuttons recommends no packages.

webext-debianbuttons suggests no packages.

-- no debconf information

-- 
bye,
pabs

https://wiki.debian.org/PaulWise
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <http://alioth-lists.debian.net/pipermail/pkg-mozext-maintainers/attachments/20201118/d78454bb/attachment.sig>


More information about the Pkg-mozext-maintainers mailing list