Source: opencv Version: 4.6.0+dfsg-6 Severity: serious Tags: patch Justification: Policy 4.9
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 During the build process, OpenCV module wechat_qrcode downloads four blobs from Github: - -- wechat_qrcode: Downloading detect.caffemodel from https://raw.githubusercontent.com/WeChatCV/opencv_3rdparty/a8b69ccc738421293254aec5ddb38bd523503252/detect.caffemodel - -- wechat_qrcode: Downloading detect.prototxt from https://raw.githubusercontent.com/WeChatCV/opencv_3rdparty/a8b69ccc738421293254aec5ddb38bd523503252/detect.prototxt - -- wechat_qrcode: Downloading sr.caffemodel from https://raw.githubusercontent.com/WeChatCV/opencv_3rdparty/a8b69ccc738421293254aec5ddb38bd523503252/sr.caffemodel - -- wechat_qrcode: Downloading sr.prototxt from https://raw.githubusercontent.com/WeChatCV/opencv_3rdparty/a8b69ccc738421293254aec5ddb38bd523503252/sr.prototxt "For packages in the main archive, required targets must not attempt network access [...]", according to Debian Policy 4.9. I have prepared a patch in a fork of the Salsa repository and have started a merge request. Regards, Victor Westerhuis - -- System Information: Debian Release: bookworm/sid APT prefers testing APT policy: (990, 'testing'), (500, 'unstable'), (100, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 5.18.0-4-amd64 (SMP w/4 CPU threads; PREEMPT) Locale: LANG=en_NL.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB:en_US:en:nl_NL:nl Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) -----BEGIN PGP SIGNATURE----- iQJHBAEBCAAxFiEE6OxII3T+o0Ujs6ECQz2Rq5dHQPsFAmMdENITHHZpY3RvckB3 ZXN0ZXJodS5pcwAKCRBDPZGrl0dA+8tJD/9opFU7fVCyUbMDSqmdWzN8zqaOGw/3 8FzeLW07m8/UrjIIvULXkNqSUCgPfyKNQ0ZFp8dEaVrUCLAZSPdTq27I+r+7I9BT QFF5B3kV0WzJmxw6u96DoYtNZQGEHLjL5ugJd+jYOTuEOwkfApTvS5CvMSI5Uuol hdw+KP0z0fNBPKB8J5lgkh1Dth1iqYQTveHuUxhf4nv6ANdTnJCmRwgyWisQpdhf d11NxpNqm4GM9TrVMG5cT/wBhriZ9PIRgswmVpq2adGCE+Pe1Qgit7VnXl2g1hU8 Nm2B4Yefq80IhSbNBpgg9LSXr+NaNY0YppUqlLZFPv7AJAyGpnJvmLmjOC9AFuTr PirsyOyO3nE+caMfJp8zZGPNjRwvGEXnuL+YOjjdoz2+rCas0Jb5c/bujHeN6hYT mt/3w7keXJikKxrmMJibXIz7gRy6Oyu1ZoGXXOkMgZezUi1s1/AUJwM7QOalpO+H 5s+btTZ8tZu7I8O748plYkekFd6UFRBnrV0xXNADpEX6jgsqcLCM+XN88z4jgidF jnIJePmz6ffJE9kjQs5illj/FtkRdSWsRabn1+0nU+RVrj9gUYgmT8dC0Cfanyrp eOQNyKK1qBcn2x3Vvfzocr0dUW1KDM+bcOCBMc/JCPlFxYeeMR/X8KCYvNzLFVGI lIc2JzYOkoIAEA== =fzKE -----END PGP SIGNATURE-----