Sign me up Login

Details about package snuffleupagus

Name:	snuffleupagus (PTS)
Uploader:	Christian Göttsche <cgzones@googlemail.com> (Debian QA page)
Description:	php-snuffleupagus - Security module for php7 and php8

Package uploads

Upload #1

Information

Version:	0.13.0-1
Uploaded:	2026-02-01 20:28
Source package:	snuffleupagus_0.13.0-1.dsc
Distribution:	unstable
Section:	php
Priority:
Homepage:	https://snuffleupagus.readthedocs.io
Vcs-Git:	https://salsa.debian.org/cgzones/snuffleupagus.git
Vcs-Browser:	https://salsa.debian.org/cgzones/snuffleupagus
Closes bugs:	#1126792

Changelog

 snuffleupagus (0.13.0-1) unstable; urgency=medium
 .
   * New upstream version 0.13.0
     - fixes CVE-2026-22034
 .
   * Adjust to moved PHP 8 default rules
   * d/control:
     - drop priority and R^3 fields with default value
     - bump to std version 4.7.3 (no further changes)
   * d/watch: rewrite in version 5
   * d/copyright: bump years
   * d/patches: add nonstring attribute to fix GCC 15 build (Closes: #1126792)

QA information

–

A watch file is present but doesn't work

Warnings:

debian/watch is an obsolete version 1 watch file;
please upgrade to a higher version
(see uscan(1) for details).
debian/watch is an obsolete version 1 watch file;
please upgrade to a higher version
(see uscan(1) for details).
debian/watch is an obsolete version 1 watch file;
please upgrade to a higher version
(see uscan(1) for details).
debian/watch is an obsolete version 1 watch file;
please upgrade to a higher version
(see uscan(1) for details).
there appears to be a version 2 format line in
the version 1 watch file debian/watch;
Have you forgotten a 'version=2' line at the start, perhaps?
Skipping the line: Version: 5

there appears to be a version 2 format line in
the version 1 watch file debian/watch;
Have you forgotten a 'version=2' line at the start, perhaps?
Skipping the line: Template: Github

there appears to be a version 2 format line in
the version 1 watch file debian/watch;
Have you forgotten a 'version=2' line at the start, perhaps?
Skipping the line: Owner: jvoisin

there appears to be a version 2 format line in
the version 1 watch file debian/watch;
Have you forgotten a 'version=2' line at the start, perhaps?
Skipping the line: Project: snuffleupagus

–
Package is not native

Format: 3.0 (quilt)
–
"Maintainer" email is the same as the uploader
–
Package has lintian warnings
snuffleupagus source
- W missing-debian-watch-file-standard
  - [debian/watch]
- W recommended-field
  - (in section for source) Priority [debian/control:1]
- P silent-on-rules-requiring-root
  - [debian/control]
- X very-long-line-length-in-source-file
  - 23038 > 512 [src/tests/dump_request/dump_request_too_big.phpt:34]
  - 653 > 512 [doc/source/installation.rst:55]
- O license-problem-php-license
  - [PHP_LICENSE] (override comment: The project is licensed under LGPL-3, it just contains some compatibility wrappers for older PHP versions (not used by Debian) and three not exported internal functions (php_hash_string_xor_char(), php_hash_hmac_prep_key() and php_hash_hmac_round()) under the upstream PHP_LICENSE.)
  - [debian/copyright] (override comment: The project is licensed under LGPL-3, it just contains some compatibility wrappers for older PHP versions (not used by Debian) and three not exported internal functions (php_hash_string_xor_char(), php_hash_hmac_prep_key() and php_hash_hmac_round()) under the upstream PHP_LICENSE.)
- O repackaged-source-not-advertised
  - [debian/copyright] (override comment: just dropping upstream Debian packaging, PDF slides, and git related files)
–
Package closes RC bug
- src:snuffleupagus:
  - #1126792 (Serious): snuffleupagus FTBFS with GCC 15
–
Package is already in Debian
- The package uploader is not currently maintaining snuffleupagus in Debian
- Last upload was on the 2026-02-01
–
Package uses debhelper-compat

Debhelper compatibility level 13
–
d/copyright is in DEP5 format

Upstream Contact: Julien (jvoisin) Voisin <julien.voisin+snuffleupagus@dustri.org>

Licenses: LGPL-3, PHP-3.01

Comments

No comments

Upstream Contact:	Julien (jvoisin) Voisin <julien.voisin+snuffleupagus@dustri.org>
Licenses:	LGPL-3, PHP-3.01