Package: libhogweed2
Version: 2.7.1-3+b1
Severity: serious
Justification: policy 12.3 footnote 2
Tags: patch
libhogweed2 contains a symlink /usr/share/doc/libhogweed2 -> libnettle4.
Its dependency on libnettle4 is unversioned though which means, that the
copyright and changelog files can get out of sync. This violates the
Debian policy section 12.3 footnote 2.
The solution is to add "libnettle4 (= ${binary:Version})" to
libhogweed2's Depends in debian/control.
Note that debhelper cannot be blamed on this, because nettle does not
use dh_installdocs --link-doc, but rather instantiates this symlink on
its own. It therefore is nettle's responsibility to add the versioned
dependency.
The same issue holds for nettle-bin.
Attaching a .debdiff for your convenience.
Helmut
diff -Nru nettle-2.7.1/debian/changelog nettle-2.7.1/debian/changelog
--- nettle-2.7.1/debian/changelog 2014-07-29 17:20:42.000000000 +0200
+++ nettle-2.7.1/debian/changelog 2014-12-13 11:00:55.000000000 +0100
@@ -1,3 +1,11 @@
+nettle (2.7.1-3.1) UNRELEASED; urgency=medium
+
+ * Non-maintainer upload.
+ * Add versioned depends on libnettle4 for packages sharing their
+ /usr/share/doc to comply with Debian policy 12.3. (Closes: #-1)
+
+ -- Helmut Grohne <[email protected]> Sat, 13 Dec 2014 10:59:28 +0100
+
nettle (2.7.1-3) unstable; urgency=low
* Use -fPIC instead of -fpic by default (Closes: #755769); needed on
diff -Nru nettle-2.7.1/debian/control nettle-2.7.1/debian/control
--- nettle-2.7.1/debian/control 2014-04-18 21:06:14.000000000 +0200
+++ nettle-2.7.1/debian/control 2014-12-13 11:01:43.000000000 +0100
@@ -35,7 +35,7 @@
Architecture: any
Multi-Arch: same
Pre-Depends: ${misc:Pre-Depends}
-Depends: ${shlibs:Depends}, ${misc:Depends}
+Depends: ${shlibs:Depends}, ${misc:Depends}, libnettle4 (= ${binary:Version})
Description: low level cryptographic library (public-key cryptos)
Nettle is a cryptographic library that is designed to fit easily in more or
less any context: In crypto toolkits for object-oriented languages (C++,
@@ -78,7 +78,7 @@
Package: nettle-bin
Section: misc
Architecture: any
-Depends: ${shlibs:Depends}, ${misc:Depends}
+Depends: ${shlibs:Depends}, ${misc:Depends}, libnettle4 (= ${binary:Version})
Breaks: lsh-utils (<< 2.0.4-dfsg-1)
Replaces: lsh-utils (<< 2.0.4-dfsg-1)
Suggests: lsh-doc
