Bump version to 1.17.10
Update German translation of manual pages

Update to 2243t.
dpkg-source: unpack additional tarballs in a deterministic order

Reported-by: Samuel Bronson <naesten@gmail.com>
Closes: #747148
build: Do not use lcov-inject first argument as target directory

All arguments are files to modify.
build: Fix lcov-inject to consider different coverage percentages

The current code was not taking into account the different coverage
ranges, with their different colors, and different images for the
completion bar. Refactor the code into functions, while we are at it.
build: Switch to use libtool for the static libraries

This makes it possible to embed libcompat inside libdpkg, so that the
static library that we ship is self contained with the required
compatibility code, specifically the MD5 functions.

This also prepares the build system for when we start building a
shared library, although it disables it by default.

Closes: #746122
dselect: Fix word wrapping logic

The switch from integer literal to boolean literals botched one of the
assignments, which was turned from 1 to false, fix that now, and stop
turning parts of the code path dead.

Regression introduced in commit cf21cccb98bdb31a84bbe1aa1217c712b47aedd2.

Warned-by: coverity
libdpkg: Add missing dpkg_program_ symbols to the version script
libdpkg: Make dpkg_locales_init() a public symbol
libdpkg: Swap deb name and member name in dpkg_ar_member_get_size()

Otherwise we might perform an out of bounds buffer read access in the
error output on bogus member sizes.
libdpkg: Fix memory leaks in buffer_copy() on error conditions

Check for errors from subfunctions and break out of the loop to be able
to release resources. Check also for unexpected EOF only after freeing
resources, so that we don't end up leaking them.

Warned-by: coverity
libdpkg: Improve branch coverage for string module
libdpkg: Fix TOCTOU race in triggers database loading

This is not security sensitive.

Warned-by: coverity
u-a: Fix TOCTOU race when loading an alternative

This does not have any security implications, but it makes the code
more robust.

Warned-by: coverity
u-a: Fix TOCTOU race in rename_mv()

This does not have any security implications, but it makes the code
more robust.

Warned-by: coverity
u-a: Switch from alternative_has_choice() to checking if fs is NULL

We are performing the same search twice, let's just reuse the fs pointer
to decide if we have found the choice.

This was confusing coverity, and making it think that
alternative_has_broken_slave() could get fs with a NULL value.

Warned-by: coverity
s-s-d: Cope with bogus OpenVZ kernels that prepend the " (deleted)" marker

There are OpenVZ Linux kernels that instead of appending, prepend the
deleted marker, making the exec check fail to match. Add a workaround
so that those systems do not get affected.

This will still be affecting any other userland tool that checks the
/proc/PID/exe symlink, and might end up helping this behaviour to get
entrenched, but better this than the getting strange system failures.

Closes: #731530
dpkg: Switch an assert() on a volatile variable to an internerr()

The assert() has a side-effect as the variable is volatile, switch it
to an internerr() so that we always get the same result regardless of
the build settings, NDEBUG in this case.

Warned-by: coverity
dpkg-architecture: Move -L argument to the Commands --help output section

The -L argument is not an option, it's a full blown command.
dpkg-buildpackage: Move code inside s///eg into a function

By using a closure, we makes the code more clear.