Control: found -1 1:1.14.31-1 On Mon, 27 Apr 2026 01:03:19 +0000 Debian FTP Masters <[email protected]> wrote: > Source: pupnp > Source-Version: 1:1.14.31-1 > Done: Sebastian Ramacher <[email protected]> > > We believe that the bug you reported is fixed in the latest version of > pupnp, which is due to be installed in the Debian FTP archive. > > A summary of the changes between this version and the previous one is > attached. > [...] > Changes: > pupnp (1:1.14.31-1) unstable; urgency=medium > . > * New upstream version 1.14.31 > - Fix CVE-2026-41682 > - Fix cmake export (Closes: #1130914)
The bug still exists in pupnp 1:1.14.31-1. The relevant lines have not been touched upstream [1],[2]. Also, upstream does not claim the cmake export being fixed [3]. Please find attached the patch fixing the issue for pupnp 1:1.14.31-1. Please release a 1:1.14.31-2 version with this patch applied. Thanks, Sven [1] https://sources.debian.org/src/pupnp/1%3A1.14.31-1/ixml/CMakeLists.txt#L61 - L63 [2] https://sources.debian.org/src/pupnp/1%3A1.14.31-1/upnp/CMakeLists.txt#L166 - L168 [3] https://sources.debian.org/src/pupnp/1%3A1.14.31-1/ChangeLog#L1 - L48 -- GPG Fingerprint 3DF5 E8AA 43FC 9FDF D086 F195 ADF5 0EDA F8AD D585 -- GPG Fingerprint 3DF5 E8AA 43FC 9FDF D086 F195 ADF5 0EDA F8AD D585 -- GPG Fingerprint 3DF5 E8AA 43FC 9FDF D086 F195 ADF5 0EDA F8AD D585
Description: Fix usage of INCLUDES DESTINATION In ixml/CMakeLists.txt and upnp/CMakeLists.txt: INCLUDES DESTINATION is not an <artifact-kind> and thus does not come with <artifact-option>s like e.g. COMPONENT. At least with cmake 4, the strings up to the next <artifact-kind> get considered as paths which do not exist, resulting in invalid 'INTERFACE_INCLUDE_DIRECTORIES ...' lines in the generated files /usr/lib/*/cmake/IXML/IXML.cmake and /usr/lib/*/cmake/UPNP/UPNP.cmake. . This patch drops the false 'COMPONENT UPNP_Development' lines. As a saveguard the remaining 'INCLUDES DESTINATION...' lines are moved to the end of the respective invocation of 'install(TARGET...)' as the cmake manual suggests, see https://cmake.org/cmake/help/v4.0/command/install.html#signatures. Author: Sven Geuer <[email protected]> Origin: backport, https://github.com/pupnp/pupnp/pull/534 Forwarded: not-needed Last-Update: 2026-03-13 --- This patch header follows DEP-3: http://dep.debian.net/deps/dep3/ --- a/ixml/CMakeLists.txt +++ b/ixml/CMakeLists.txt @@ -58,9 +58,6 @@ EXPORT IXML ARCHIVE DESTINATION ${CMAKE_INSTALL_LIBDIR} COMPONENT UPNP_Development - INCLUDES - DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp - COMPONENT UPNP_Development LIBRARY DESTINATION ${CMAKE_INSTALL_LIBDIR} COMPONENT UPNP_RunTime NAMELINK_COMPONENT UPNP_Development @@ -68,6 +65,7 @@ COMPONENT UPNP_Development RUNTIME DESTINATION ${CMAKE_INSTALL_BINDIR} COMPONENT UPNP_RunTime + INCLUDES DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp ) endif() @@ -111,9 +109,6 @@ EXPORT IXML ARCHIVE DESTINATION ${CMAKE_INSTALL_LIBDIR} COMPONENT UPNP_Development - INCLUDES - DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp - COMPONENT UPNP_Development LIBRARY DESTINATION ${CMAKE_INSTALL_LIBDIR} COMPONENT UPNP_RunTime NAMELINK_COMPONENT UPNP_Development @@ -121,6 +116,7 @@ COMPONENT UPNP_Development RUNTIME DESTINATION ${CMAKE_INSTALL_BINDIR} COMPONENT UPNP_RunTime + INCLUDES DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp ) endif() --- a/upnp/CMakeLists.txt +++ b/upnp/CMakeLists.txt @@ -163,9 +163,6 @@ EXPORT UPNP ARCHIVE DESTINATION ${CMAKE_INSTALL_LIBDIR} COMPONENT UPNP_Development - INCLUDES - DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp - COMPONENT UPNP_Development LIBRARY DESTINATION ${CMAKE_INSTALL_LIBDIR} COMPONENT UPNP_RunTime NAMELINK_COMPONENT UPNP_Development @@ -173,6 +170,7 @@ COMPONENT UPNP_Development RUNTIME DESTINATION ${CMAKE_INSTALL_BINDIR} COMPONENT UPNP_RunTime + INCLUDES DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp ) endif() @@ -230,9 +228,6 @@ EXPORT UPNP ARCHIVE DESTINATION ${CMAKE_INSTALL_LIBDIR} COMPONENT UPNP_Development - INCLUDES - DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp - COMPONENT UPNP_Development LIBRARY DESTINATION ${CMAKE_INSTALL_LIBDIR} COMPONENT UPNP_RunTime NAMELINK_COMPONENT UPNP_Development @@ -240,6 +235,7 @@ COMPONENT UPNP_Development RUNTIME DESTINATION ${CMAKE_INSTALL_BINDIR} COMPONENT UPNP_RunTime + INCLUDES DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp ) endif()
signature.asc
Description: This is a digitally signed message part
