N: I: spawn-fcgi: bash-term-in-posix-shell '&>' [usr/share/doc/spawn-fcgi/examples/spawn-fcgi_launcher:46] N: N: This script is marked as running under /bin/sh, but it seems to use a N: feature found in bash but not in the SUSv3 or POSIX shell specification. N: N: Some examples are: N: N: - == in a test, it should use = instead - read without a variable in the N: argument - function to define a function - source instead of . - . command N: args, passing arguments to commands via source is not supported - N: {foo,bar} instead of foo bar - [[ test ]] instead of [ test ] (requires a N: Korn shell) - type instead of which or command -v N: N: Visibility: info N: Show-Always: no N: Check: shell/non-posix/bash-centric N: N: I: spawn-fcgi: bash-term-in-posix-shell '&>' [usr/share/doc/spawn-fcgi/examples/spawn-fcgi_launcher:53] N: I: spawn-fcgi: hardening-no-bindnow [usr/bin/spawn-fcgi] N: N: This package provides an ELF binary that lacks the "bindnow" linker flag. N: N: This is needed (together with "relro") to make the "Global Offset Table" N: (GOT) fully read-only. The bindnow feature trades startup time for N: improved security. Please consider enabling this feature or consider N: overriding the tag (possibly with a comment about why). N: N: If you use dpkg-buildflags, you may have to add hardening=+bindnow or N: hardening=+all to DEB_BUILD_MAINT_OPTIONS. N: N: The relevant compiler flags are set in LDFLAGS. N: N: Please refer to https://wiki.debian.org/Hardening for details. N: N: Visibility: info N: Show-Always: no N: Check: binaries/hardening N: N: I: spawn-fcgi source: out-of-date-standards-version 4.7.0 (released 2024-04-07) (current is 4.7.2) N: N: The source package refers to a Standards-Version older than the one that N: was current at the time the package was created (according to the N: timestamp of the latest debian/changelog entry). Please consider updating N: the package to current Policy and setting this control field N: appropriately. N: N: If the package is already compliant with the current standards, you don't N: have to re-upload the package just to adjust the Standards-Version control N: field. However, please remember to update this field next time you upload N: the package. N: N: See /usr/share/doc/debian-policy/upgrading-checklist.txt.gz in the N: debian-policy package for a summary of changes in newer versions of N: Policy. N: N: Please refer to N: https://www.debian.org/doc/debian-policy/upgrading-checklist.html for N: details. N: N: Visibility: info N: Show-Always: no N: Check: fields/standards-version N: N: P: spawn-fcgi source: hyphen-in-upstream-part-of-debian-changelog-version 1.6.7~snap-20250301-194725-ga82da4 [debian/changelog:1] N: N: The upstream version in the debian changelog contains one or more hyphens. N: While that is okay according to Debian Policy, some tools may croak. N: N: Please refer to Version (Section 5.6.12) in the Debian Policy Manual for N: details. N: N: Visibility: pedantic N: Show-Always: no N: Check: debian/changelog N: N: P: spawn-fcgi: maintainer-script-without-set-e [preinst] N: N: The maintainer script passes -e to the shell on the #! line rather than N: using set -e in the body of the script. This is fine for normal operation, N: but if the script is run by hand with sh /path/to/script (common in N: debugging), -e will not be in effect. It's therefore better to use set -e N: in the body of the script. N: N: Please refer to Scripts (Section 10.4) in the Debian Policy Manual for N: details. N: N: Visibility: pedantic N: Show-Always: no N: Check: scripts N: N: X: spawn-fcgi source: debian-watch-does-not-check-openpgp-signature [debian/watch] N: N: This watch file does not specify a means to verify the upstream tarball N: using a cryptographic signature. N: N: If upstream distributions provides such signatures, please use the N: pgpsigurlmangle options in this watch file's opts= to generate the URL of N: an upstream OpenPGP signature. This signature is automatically downloaded N: and verified against a keyring stored in debian/upstream/signing-key.asc N: N: Of course, not all upstreams provide such signatures but you could request N: them as a way of verifying that no third party has modified the code after N: its release (projects such as phpmyadmin, unrealircd, and proftpd have N: suffered from this kind of attack). N: N: Please refer to the uscan(1) manual page for details. N: N: Visibility: pedantic N: Show-Always: no N: Check: debian/watch N: Renamed from: debian-watch-does-not-check-gpg-signature N: debian-watch-may-check-gpg-signature N: This tag is experimental. N: N: X: spawn-fcgi source: prefer-uscan-symlink filenamemangle s%(?:.*?)?v?(\d[\d.]*)\.tar\.gz%@PACKAGE@-$1.tar.gz% [debian/watch:4] N: N: Please consider setting USCAN_SYMLINK=rename in your ~/.devscripts N: configuration file instead of using the option filenamemangle in N: debian/watch. N: N: Please check with your team before making changes to sources you maintain N: together. There are circumstances when the filenamemangle option is N: better. N: N: Please refer to the uscan(1) manual page for details. N: N: Visibility: pedantic N: Show-Always: no N: Check: debian/watch N: This tag is experimental. N: N: X: spawn-fcgi: spelling-error-in-binary childs children [usr/bin/spawn-fcgi] N: N: Lintian found a spelling error in the given binary. Lintian has a list of N: common misspellings that it looks for. It does not have a dictionary like N: a spelling checker does. N: N: If the string containing the spelling error is translated with the help of N: gettext or a similar tool, please fix the error in the translations as N: well as the English text to avoid making the translations fuzzy. With N: gettext, for example, this means you should also fix the spelling mistake N: in the corresponding msgids in the *.po files. N: N: You can often find the word in the source code by running: N: N: grep -rw N: N: This tag may produce false positives for words that contain non-ASCII N: characters due to limitations in strings. N: N: Visibility: pedantic N: Show-Always: no N: Check: binaries/spelling N: This tag is experimental. N: N: X: spawn-fcgi source: update-debian-copyright 2017 vs 2025 [debian/copyright:9] N: N: The most recent copyright year mentioned for files in ./debian lags behind N: the year in the timestamp for the most recent changelog entry. N: N: Visibility: pedantic N: Show-Always: no N: Check: debian/copyright/dep5 N: This tag is experimental. N: N: X: spawn-fcgi source: upstream-metadata-file-is-missing N: N: This source package is not Debian-native but it does not have a N: debian/upstream/metadata file. N: N: The Upstream MEtadata GAthered with YAml (UMEGAYA) project is an effort to N: collect meta-information about upstream projects from any source package. N: This file is in YAML format and it is used in to feed the data in the N: UltimateDebianDatabase. For example, it can contains the way the authors N: want their software be cited in publications and some bibliographic N: references about the software. N: N: Please add a debian/upstream/metadata file. N: N: Please refer to https://dep-team.pages.debian.net/deps/dep12/ and N: https://wiki.debian.org/UpstreamMetadata for details. N: N: Visibility: pedantic N: Show-Always: no N: Check: debian/upstream/metadata N: This tag is experimental. N: N: C: spawn-fcgi: control-tarball-compression-format xz N: N: This is the compressor format used for the control.tar tarball. N: N: Visibility: classification N: Show-Always: no N: Check: deb-format N: This tag is a classification. There is no issue in your package. N: N: C: spawn-fcgi-dbgsym: control-tarball-compression-format xz N: C: spawn-fcgi: ctrl-script [preinst] N: N: This package has one or more maintainer scripts (or other executable N: control files). N: N: This flags any control file with the executable bit set. N: N: Visibility: classification N: Show-Always: no N: Check: control-files N: This tag is a classification. There is no issue in your package. N: N: C: spawn-fcgi: data-tarball-compression-format xz N: N: This is the compressor format used for the data.tar tarball. N: N: Visibility: classification N: Show-Always: no N: Check: deb-format N: This tag is a classification. There is no issue in your package. N: N: C: spawn-fcgi-dbgsym: data-tarball-compression-format xz N: C: spawn-fcgi source: debhelper-compat-level 13 N: N: This is the debhelper compat level used specified by this package. N: N: Visibility: classification N: Show-Always: no N: Check: debhelper N: This tag is a classification. There is no issue in your package. N: N: C: spawn-fcgi source: debhelper-compat-virtual-relation 13 [debian/control] N: N: This package is using the debhelper-compat virtual package as a N: build-dependency. N: N: Visibility: classification N: Show-Always: no N: Check: debhelper N: This tag is a classification. There is no issue in your package. N: N: C: spawn-fcgi source: debian-build-system dh [debian/rules] N: N: This is the build system that Lintian believes the package is using. N: N: Visibility: classification N: Show-Always: no N: Check: debhelper N: This tag is a classification. There is no issue in your package. N: N: C: spawn-fcgi source: debian-watch-file-standard 4 [debian/watch] N: N: The watch file uses this version standard. The currently known watch file N: versions are 2, 3 and 4. Version 1 means it was undeclared. N: N: Please refer to the uscan(1) manual page for details. N: N: Visibility: classification N: Show-Always: no N: Check: debian/watch/standard N: This tag is a classification. There is no issue in your package. N: N: C: spawn-fcgi source: mail-contact Maintainer "Jérémy Lal" N: N: This person is a contact in the named group for this package. N: N: Visibility: classification N: Show-Always: no N: Check: fields/mail-address N: Renamed from: maintainer uploader N: This tag is a classification. There is no issue in your package. N: N: C: spawn-fcgi: mail-contact Maintainer "Jérémy Lal" N: C: spawn-fcgi-dbgsym: mail-contact Maintainer "Jérémy Lal" N: C: spawn-fcgi: maintainer-script-interpreter /bin/sh [preinst] N: N: Interpreter used in maintainer script or ELF N: N: Visibility: classification N: Show-Always: no N: Check: scripts N: This tag is a classification. There is no issue in your package. N: N: C: spawn-fcgi-dbgsym: no-ctrl-scripts N: N: The package does not rely on any maintainer scripts (or other executable N: control files). N: N: Visibility: classification N: Show-Always: no N: Check: control-files N: This tag is a classification. There is no issue in your package. N: N: C: spawn-fcgi source: package-is-maintained-by-individual N: N: The package is maintained by an individual according to the N: maintainer/uploaders fields in the debian/control file. N: N: Visibility: classification N: Show-Always: no N: Check: fields/vcs N: This tag is a classification. There is no issue in your package. N: N: C: spawn-fcgi: package-is-maintained-by-individual N: C: spawn-fcgi-dbgsym: package-is-maintained-by-individual N: C: spawn-fcgi source: patch-system quilt N: N: This package uses the specified patch system (eg. "quilt" or "dpatch"). N: N: Visibility: classification N: Show-Always: no N: Check: debian/patches N: This tag is a classification. There is no issue in your package. N: N: C: spawn-fcgi source: rules-do-not-require-root [debian/control:10] N: N: The sources can build the installation packages without using fakeroot(1) N: or similar. N: N: Please refer to usr/share/doc/dpkg/spec/rootless-builds.txt, debian/rules N: and Rules-Requires-Root (Section 4.9.2) in the Debian Policy Manual, and N: Rules-Requires-Root (Section 5.6.31) in the Debian Policy Manual for N: details. N: N: Visibility: classification N: Show-Always: no N: Check: debian/control/field/rules-requires-root N: Renamed from: rules-does-not-require-root N: This tag is a classification. There is no issue in your package. N: N: C: spawn-fcgi source: source-format 3.0 (quilt) N: N: This is the source format declared in the package. N: N: Visibility: classification N: Show-Always: no N: Check: debian/source-dir N: This tag is a classification. There is no issue in your package. N: N: C: spawn-fcgi source: standards-version 4.7.0 N: N: The standards version of the package according to Standards-Version field N: in the debian/control file. N: N: Visibility: classification N: Show-Always: no N: Check: fields/standards-version N: This tag is a classification. There is no issue in your package. N: N: C: spawn-fcgi source: trimmed-deb822-field §1 Build-Depends debhelper-compat (= 13), meson [debian/control:5] N: N: The raw but trimmed contents of the named field in the given Deb822 file. N: The number indicates the section from the top, starting at 1. N: N: Visibility: classification N: Show-Always: no N: Check: fields/deb822 N: This tag is a classification. There is no issue in your package. N: N: C: spawn-fcgi source: trimmed-deb822-field §1 Homepage http://redmine.lighttpd.net/projects/spawn-fcgi [debian/control:9] N: C: spawn-fcgi source: trimmed-deb822-field §1 Maintainer Jérémy Lal [debian/control:2] N: C: spawn-fcgi source: trimmed-deb822-field §1 Priority optional [debian/control:4] N: C: spawn-fcgi source: trimmed-deb822-field §1 Rules-Requires-Root no [debian/control:10] N: C: spawn-fcgi source: trimmed-deb822-field §1 Section web [debian/control:3] N: C: spawn-fcgi source: trimmed-deb822-field §1 Source spawn-fcgi [debian/control:1] N: C: spawn-fcgi source: trimmed-deb822-field §1 Standards-Version 4.7.0 [debian/control:6] N: C: spawn-fcgi source: trimmed-deb822-field §1 Vcs-Browser https://salsa.debian.org/debian/spawn-fcgi [debian/control:7] N: C: spawn-fcgi source: trimmed-deb822-field §1 Vcs-Git https://salsa.debian.org/debian/spawn-fcgi.git [debian/control:8] N: C: spawn-fcgi source: trimmed-deb822-field §2 Architecture any [debian/control:13] N: C: spawn-fcgi source: trimmed-deb822-field §2 Depends ${shlibs:Depends},\n ${misc:Depends} [debian/control:14] N: C: spawn-fcgi source: trimmed-deb822-field §2 Description FastCGI process spawner\n Allows FastCGI processes to be separated from web server process :\n * Easy creation of chmoded socket.\n * Privilege separation without needing a suid-binary,\n or running a server as root.\n * You can restart your web server and the FastCGI applications\n without restarting the others.\n * You can run them in different chroot()s.\n * Running your FastCGI applications doesn’t depend on the web server\n you are running, which allows for easier testing of/migration\n to other web servers. [debian/control:16] N: C: spawn-fcgi source: trimmed-deb822-field §2 Package spawn-fcgi [debian/control:12] N: C: spawn-fcgi source: trimmed-field Architecture any N: N: These are the raw but trimmed contents of the named field in the package's N: primary control file. N: N: Visibility: classification N: Show-Always: no N: Check: fields/trimmed N: This tag is a classification. There is no issue in your package. N: N: C: spawn-fcgi source: trimmed-field Binary spawn-fcgi N: C: spawn-fcgi source: trimmed-field Build-Depends debhelper-compat (= 13), meson N: C: spawn-fcgi source: trimmed-field Checksums-Sha1 6f9bbf7b0869ed6d25e5250d289b90ca22b632d1 11868 spawn-fcgi_1.6.7~snap-20250301-194725-ga82da4.orig.tar.xz\n ec4b9d8025af9ec8a130abaf428af1f76a3bfc3b 4356 spawn-fcgi_1.6.7~snap-20250301-194725-ga82da4-0.2.debian.tar.xz N: C: spawn-fcgi source: trimmed-field Checksums-Sha256 8c2993a81cf023403c575521fd2fa9b5ebba60bc5ddf71dc330922dcec50d08f 11868 spawn-fcgi_1.6.7~snap-20250301-194725-ga82da4.orig.tar.xz\n 312d1252c554b11c16e851e01bc5e05b53e4f53ff9ffca30810e66559434b04e 4356 spawn-fcgi_1.6.7~snap-20250301-194725-ga82da4-0.2.debian.tar.xz N: C: spawn-fcgi source: trimmed-field Files 8a11b403e079625c32b7f840e07dd8c5 11868 spawn-fcgi_1.6.7~snap-20250301-194725-ga82da4.orig.tar.xz\n 2794aad967b259dd0487ea6bf483426d 4356 spawn-fcgi_1.6.7~snap-20250301-194725-ga82da4-0.2.debian.tar.xz N: C: spawn-fcgi source: trimmed-field Format 3.0 (quilt) N: C: spawn-fcgi source: trimmed-field Homepage http://redmine.lighttpd.net/projects/spawn-fcgi N: C: spawn-fcgi source: trimmed-field Maintainer Jérémy Lal N: C: spawn-fcgi source: trimmed-field Package-List spawn-fcgi deb web optional arch=any N: C: spawn-fcgi source: trimmed-field Source spawn-fcgi N: C: spawn-fcgi source: trimmed-field Standards-Version 4.7.0 N: C: spawn-fcgi source: trimmed-field Vcs-Browser https://salsa.debian.org/debian/spawn-fcgi N: C: spawn-fcgi source: trimmed-field Vcs-Git https://salsa.debian.org/debian/spawn-fcgi.git N: C: spawn-fcgi source: trimmed-field Version 1.6.7~snap-20250301-194725-ga82da4-0.2 N: C: spawn-fcgi: trimmed-field Architecture amd64 N: C: spawn-fcgi: trimmed-field Depends libc6 (>= 2.38) N: C: spawn-fcgi: trimmed-field Description FastCGI process spawner\n Allows FastCGI processes to be separated from web server process :\n * Easy creation of chmoded socket.\n * Privilege separation without needing a suid-binary,\n or running a server as root.\n * You can restart your web server and the FastCGI applications\n without restarting the others.\n * You can run them in different chroot()s.\n * Running your FastCGI applications doesn’t depend on the web server\n you are running, which allows for easier testing of/migration\n to other web servers. N: C: spawn-fcgi: trimmed-field Homepage http://redmine.lighttpd.net/projects/spawn-fcgi N: C: spawn-fcgi: trimmed-field Installed-Size 55 N: C: spawn-fcgi: trimmed-field Maintainer Jérémy Lal N: C: spawn-fcgi: trimmed-field Package spawn-fcgi N: C: spawn-fcgi: trimmed-field Priority optional N: C: spawn-fcgi: trimmed-field Section web N: C: spawn-fcgi: trimmed-field Version 1.6.7~snap-20250301-194725-ga82da4-0.2 N: C: spawn-fcgi-dbgsym: trimmed-field Architecture amd64 N: C: spawn-fcgi-dbgsym: trimmed-field Auto-Built-Package debug-symbols N: C: spawn-fcgi-dbgsym: trimmed-field Build-Ids c82b6edf616e72fead061df6a1fc1ccabb3a4f00 N: C: spawn-fcgi-dbgsym: trimmed-field Depends spawn-fcgi (= 1.6.7~snap-20250301-194725-ga82da4-0.2) N: C: spawn-fcgi-dbgsym: trimmed-field Description debug symbols for spawn-fcgi N: C: spawn-fcgi-dbgsym: trimmed-field Installed-Size 39 N: C: spawn-fcgi-dbgsym: trimmed-field Maintainer Jérémy Lal N: C: spawn-fcgi-dbgsym: trimmed-field Package spawn-fcgi-dbgsym N: C: spawn-fcgi-dbgsym: trimmed-field Priority optional N: C: spawn-fcgi-dbgsym: trimmed-field Section debug N: C: spawn-fcgi-dbgsym: trimmed-field Source spawn-fcgi N: C: spawn-fcgi-dbgsym: trimmed-field Version 1.6.7~snap-20250301-194725-ga82da4-0.2 N: C: spawn-fcgi source: vcs git N: N: The package uses the specified VCS (eg. "git") according to the N: debian/control file. N: N: Visibility: classification N: Show-Always: no N: Check: fields/vcs N: This tag is a classification. There is no issue in your package. N: N: C: spawn-fcgi source: vcs-uri Git https://salsa.debian.org/debian/spawn-fcgi.git N: N: The package uses the specified VCS URI according to the debian/control N: file. N: N: Visibility: classification N: Show-Always: no N: Check: fields/vcs N: This tag is a classification. There is no issue in your package. N: