On 4 March 2010 at 16:58, Santiago Vila wrote:
| On Thu, 4 Mar 2010, Dirk Eddelbuettel wrote:
| 
| > On 4 March 2010 at 14:12, Santiago Vila wrote:
| > | Package: ggobi
| > | Version: 2.1.9~20091212-2
| > | Severity: important
| > | User: [email protected]
| > | Usertags: switch-to-autopoint
| > | 
| > | There is now an "autopoint" package. If your package uses the
| > | autopoint script (either directly or indirectly), please build-depend
| > | on the autopoint package. If you had cvs in build-depends only because
| > | of autopoint, you should drop it now.
| > | 
| > | If gettext itself is in build-depends and it's not used other than
| > | indirectly by autopoint, it could be dropped as well.
| > | 
| > | You will find more details about this in the README.Debian file for
| > | the gettext package (>= 0.17-10).
| > 
| > I think we can close this.  Ggobi is more or less frozen upstream; normal
| > releases would not require autopoint and I only needed auto* as I worked off
| > SVN for one interim release due to the recent libtool CVE.
| 
| Please note that I have only reported this bug against packages which
| are known to use autopoint. I verified this using sbuild and a
| modified autopoint which says "Hello, I'm autopoint" and then looking
| at the build logs.
| 
| In other words: If you receive this bug, most likely there is
| actually something to fix.

You _completely_ missed what I wrote. Let me try again:

    You happen to have hit a single one-off upload due to a CVE
    issue. Regular buids don't use it. Hence no fix as I'll simply roll back
    the one-off.  Clearer?

Here are the two pertinent changelog entries:

ggobi (2.1.9~20091212-2) unstable; urgency=low

  * debian/rules: Do not remove .la files for plugins as this stops
    the plugins from working (reported by Liviu Andronic)
  * debian/ggobi.lintian-overrides: Add exemptions for .la files

 -- Dirk Eddelbuettel <[email protected]>  Sat, 23 Jan 2010 08:03:45 -0600

ggobi (2.1.9~20091212-1) unstable; urgency=low

  * New upstream pre-release built with new libltdl from libtool 2.2.6b 
    in regards to CVE-2009-3736[0]                      (Closes: #559806)

  * debian/patches:
    - 01_graphviz.patch: two lines carried over from previous ggobi
      and needed as Debian's graphviz seems to be too old
    - 02_manual.patch: switch to using includegraphics in latex
  
  * debian/control: Added latex toolchain to Build-Depends: to support
    upstream change of building manual                  (Closes: #495390)
  
  * debian/control: Added Build-Depends on libltdl-dev (>= 2.2.6b)
  * debian/rules: Add --without-included-ltdl to configure call

  * debian/control: Added Build-Depends: on libtool (>= 2.2.6b), autoconf
    gettext, cvs, automake, gob2 in order to run './bootstrap' as this is
    straight from SVN
  * debian/rules: Added ./bootstrap call
                                                        
  * debian/control: Increased Standard-Version: to 3.8.3 

 -- Dirk Eddelbuettel <[email protected]>  Thu, 10 Dec 2009 22:53:59 -0600


Dirk

-- 
  Registration is open for the 2nd International conference R / Finance 2010
  See http://www.RinFinance.com for details, and see you in Chicago in April!



-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to