Dear Maintainer,
I am currently working on an updated version of the amule package which
normally build-depends on libupnp-dev. When trying such a build,
setting up the build environment using pbuilder/cowbuilder fails with
various messages like:
CMake Error in src/CMakeLists.txt:
Imported target "UPNP::Shared" includes non-existent path
"/usr/COMPONENT"
in its INTERFACE_INCLUDE_DIRECTORIES. Possible reasons include:
* The path was deleted, renamed, or moved to another location.
* An install or uninstall procedure did not complete successfully.
* The installation package was faulty and references files it does not
provide.
See pipeline on Salsa [1] for a complete picture.
These errors are caused by a malformed INTERFACE_INCLUDE_DIRECTORIES
statement in /usr/lib/*/cmake/UPNP/UPNP.cmake at line 73. In addition,
exactly the same malformed statement exists in
/usr/lib/*/IXML/IXML.cmake again at line 73.
These malformed statements are originating from invalid use of
'install(TARGETS ... INCLUDES DESTINATION ...)' in source files
upnp/CMakeLists.txt [2] + [3] and ixml/CMakeLists.txt [4] + [5].
INCLUDES DESTINATION does not know artifact options like COMPONENT but
solely directories [6].
I reported the issue upstream. Though, upstream seems to be hesitant to
accept my pull request [7].
I prepared patches to fix this in Debian for versions 1:1.14.25-1 and
1:1.18.0-1 of pupnp. Please find the patches attached, ready to be
imported with 'quilt import ...'. A patched local build of pupnp
1:1.14.25-1 enabled a successful local build of the amule package under
development. It would be great patched versions 1:1.14.25-2 and
1:1.18.0-2 of pupnp would show up in the repo.
Best,
Sven
[1] https://salsa.debian.org/sge/amule/-/jobs/9235504#L2703 ff.
[2] https://sources.debian.org/src/pupnp/1%3A1.14.25-1/upnp/CMakeLists.txt#L159 + L160
[3] https://sources.debian.org/src/pupnp/1%3A1.14.25-1/upnp/CMakeLists.txt#L218 + L219
[4] https://sources.debian.org/src/pupnp/1%3A1.14.25-1/ixml/CMakeLists.txt#L60 + L61
[5] https://sources.debian.org/src/pupnp/1%3A1.14.25-1/ixml/CMakeLists.txt#L109 + L110
[6] https://cmake.org/cmake/help/v4.0/command/install.html#signatures
[7] https://github.com/pupnp/pupnp/pull/534
[...] Upstream worked up a different solution [1] which yields the same results in regards to the build artefacts. Please consider cherry- picking their fix. Sven [1] https://github.com/pupnp/pupnp/pull/537
[...] I prepared MR !1 [2] containing upstream's fix. [2] https://salsa.debian.org/multimedia-team/pupnp/-/merge_requests/1
We believe that the bug you reported is fixed in the latest version of
pupnp, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1130914@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Sebastian Ramacher <sramacher@debian.org> (supplier of updated pupnp package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Thu, 02 Apr 2026 10:55:36 +0200
Source: pupnp
Architecture: source
Version: 1:1.18.4-1
Distribution: experimental
Urgency: medium
Maintainer: Debian Multimedia Maintainers <debian-multimedia@lists.debian.org>
Changed-By: Sebastian Ramacher <sramacher@debian.org>
Closes: 1130914
Changes:
pupnp (1:1.18.4-1) experimental; urgency=medium
.
* New upstream version 1.18.4
- Fix cmake export (Closes: #1130914)
Checksums-Sha1:
4e69ebecfa0400e96d27fce833be97da66c2d46a 1718 pupnp_1.18.4-1.dsc
634e446357e34d9af67fe799508cbaac547d3982 831842 pupnp_1.18.4.orig.tar.gz
857841d690842a2b3efce1a04ccc03256a3d269b 14060 pupnp_1.18.4-1.debian.tar.xz
2d8fd53666d83713452673fe8a83c2df5dd2f430 9651 pupnp_1.18.4-1_amd64.buildinfo
Checksums-Sha256:
873be6bfc1d29af83adb51c498ee210aef5387611895d6e1f891499b9678562c 1718 pupnp_1.18.4-1.dsc
855502aa87123e275ceab89a999161b8d631f99fd7b93e4151eba77a29ae666d 831842 pupnp_1.18.4.orig.tar.gz
465e20aaffa440b7d626ab9c2475e3edbafbe89f94259e12934b9cc71d870e37 14060 pupnp_1.18.4-1.debian.tar.xz
e019920583105a656d0c6044895bb8dea40fc73391077c1a3da602139592435a 9651 pupnp_1.18.4-1_amd64.buildinfo
Files:
820da8887a8843db36691aba8de6164d 1718 net optional pupnp_1.18.4-1.dsc
0524f649cfca8e0a45ac2f715fb0c8a8 831842 net optional pupnp_1.18.4.orig.tar.gz
02a9a9b03544af187576cb82b1284590 14060 net optional pupnp_1.18.4-1.debian.tar.xz
ff3f30ace56f6f7c60bcc98d91d6b37e 9651 net optional pupnp_1.18.4-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
wr0EARYKAG8FgmnOL9MJECGTazZgD82JRxQAAAAAAB4AIHNhbHRAbm90YXRpb25z
LnNlcXVvaWEtcGdwLm9yZzB9DO4QR1Yi5yMqmo8/gRvGonUJrElTVu4tdwuMHFzF
FiEEQmJ+hB2ZZ9qD4fqQIZNrNmAPzYkAAMuCAQClQDGlHTwFHIjKzpXv5ttNPugE
GkWYFeJGfG3TILcEZgEAiPgavs7nA9U4akF5jgu7anBW9xuAjT1OkfkBOlSL3Qk=
=sKc/
-----END PGP SIGNATURE-----
We believe that the bug you reported is fixed in the latest version of
pupnp, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1130914@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Sebastian Ramacher <sramacher@debian.org> (supplier of updated pupnp package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sun, 26 Apr 2026 21:13:41 +0200
Source: pupnp
Architecture: source
Version: 1:1.14.31-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Multimedia Maintainers <debian-multimedia@lists.debian.org>
Changed-By: Sebastian Ramacher <sramacher@debian.org>
Closes: 1130914
Changes:
pupnp (1:1.14.31-1) unstable; urgency=medium
.
* New upstream version 1.14.31
- Fix CVE-2026-41682
- Fix cmake export (Closes: #1130914)
* debian/control:
- Bump Standards-Version
- Drop RRR: no
- Drop Priority: optional
Checksums-Sha1:
8a7a3e3a7f242b21380b003720c5b5775b7513a7 1731 pupnp_1.14.31-1.dsc
654fcd4806ca1b72bbbb1c79d5c851a4149a8470 826590 pupnp_1.14.31.orig.tar.gz
928e4c2d0b70b834018a2e0c16cd90b4681802f0 14100 pupnp_1.14.31-1.debian.tar.xz
90b8c10ee0308f82a2b9a6728ff0da90fdc79289 7008 pupnp_1.14.31-1_source.buildinfo
Checksums-Sha256:
0a30a40784099ac044f1f58f9e3c3a63265df59760c799c12fcbdedc2c080e4f 1731 pupnp_1.14.31-1.dsc
ce1dd3da7268ad61a56041af0ee80a3d067e7fbd197e2a387ae53942f70068bd 826590 pupnp_1.14.31.orig.tar.gz
8581f0495e547b5fb29e9106b1bf3a90eee8a13915951cb6a5e916f7bacd701b 14100 pupnp_1.14.31-1.debian.tar.xz
7e4340248a0ef83eb63f949ee7259a0953e1fde5f9d8ad57784db400bab29f9e 7008 pupnp_1.14.31-1_source.buildinfo
Files:
1d4d83f92fdfdd984abfde40dbd50580 1731 net optional pupnp_1.14.31-1.dsc
4ec1a037f8f9bc32497db0730b401134 826590 net optional pupnp_1.14.31.orig.tar.gz
84b8b9cea4ae385dd05569802642d0f3 14100 net optional pupnp_1.14.31-1.debian.tar.xz
df439e3156c9db44d61306419973f680 7008 net optional pupnp_1.14.31-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
wr0EARYKAG8FgmnuZRcJECGTazZgD82JRxQAAAAAAB4AIHNhbHRAbm90YXRpb25z
LnNlcXVvaWEtcGdwLm9yZ/gz6TCkQEuKUVpl27E/w01arnKS3cMTge6k+FDIcJq0
FiEEQmJ+hB2ZZ9qD4fqQIZNrNmAPzYkAADxPAP9UlQFItpOWkyjGFda0Bg4KDjUR
DUp+JSzmQ5IWu0gp2gEAnEHblgDJvxoxYRxDM/jS3bSDbzwoTPVtnekpJ8QvagM=
=eMuf
-----END PGP SIGNATURE-----
Control: found -1 1:1.14.31-1 [...] The bug still exists in pupnp 1:1.14.31-1. The relevant lines have not been touched upstream [1],[2]. Also, upstream does not claim the cmake export being fixed [3]. Please find attached the patch fixing the issue for pupnp 1:1.14.31-1. Please release a 1:1.14.31-2 version with this patch applied. Thanks, Sven [1] https://sources.debian.org/src/pupnp/1%3A1.14.31-1/ixml/CMakeLists.txt#L61 - L63 [2] https://sources.debian.org/src/pupnp/1%3A1.14.31-1/upnp/CMakeLists.txt#L166 - L168 [3] https://sources.debian.org/src/pupnp/1%3A1.14.31-1/ChangeLog#L1 - L48