Your message dated Mon, 23 Jun 2014 07:34:09 +0000 with message-id <e1wyylv-0000fn...@franck.debian.org> and subject line Bug#752223: fixed in biomaj-watcher 1.2.2-1 has caused the Debian Bug report #752223, regarding [biomaj-watcher] Some sources are not included in your package to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 752223: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=752223 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: src:biomaj-watcher Version: 1.2.1-1 user: debian...@lists.debian.org usertags: source-is-missing severity: serious X-Debbugs-CC: ftpmas...@debian.org Hi, Your package seems to include some files that lack sources in prefered forms of modification: usr/share/biomaj-watcher/src/war/bmajwatcher/bmajwatcher.nocache.js (may be included elsewhere) usr/share/biomaj-watcher/src/war/resources/chart/open-flash-chart.swf usr/share/biomaj-watcher/src/war/resources/flash/swfobject.js (may be packaed under debian) usr/share/biomaj-watcher/src/war/bmajwatcher/sc/modules/ISC_DSBrowser.js usr/share/biomaj-watcher/src/war/bmajwatcher/sc/modules/ISC_EBay.js usr/share/biomaj-watcher/src/war/bmajwatcher/sc/modules/ISC_History.js usr/share/biomaj-watcher/src/war/bmajwatcher/sc/modules/ISC_Kapow.js (no idea about these 4) According to Debian Free Software Guidelines [1] (DFSG) #2: "The program must include source code, and must allow distribution in source code as well as compiled form.". This could also constitute a license violation for some copyleft licenses such as the GNU GPL. In order to solve this problem, you could: 1. repack the origin tarball adding the missing source to it. 2 add the source files to "debian/missing-sources" directory Both way satisfies the requirement that we ship the source. Second option might be preferable due to the following reasons [2]: - Upstream can do it too and you could even supply a patch to them, thus full filling our social contract [3], see particularly ยง2. - If source and non-source are in different locations, ftpmasters may miss the source and (needlessly) reject the package. - The source isn't duplicated in every .diff.gz/.debian.tar.* (though this only really matters for larger sources). You could also ask debian...@lists.debian.org or #debian-qa for more guidance. [1] https://www.debian.org/social_contract.en.html#guidelines [2] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=736873#8 [3] https://www.debian.org/social_contract
--- End Message ---
--- Begin Message ---Source: biomaj-watcher Source-Version: 1.2.2-1 We believe that the bug you reported is fixed in the latest version of biomaj-watcher, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 752...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Olivier Sallou <osal...@debian.org> (supplier of updated biomaj-watcher package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 22 Jun 2014 09:19:40 +0200 Source: biomaj-watcher Binary: biomaj-watcher Architecture: source all Version: 1.2.2-1 Distribution: unstable Urgency: medium Maintainer: Debian Med Packaging Team <debian-med-packag...@lists.alioth.debian.org> Changed-By: Olivier Sallou <osal...@debian.org> Description: biomaj-watcher - biological data-bank updater - web interface Closes: 742859 752223 Changes: biomaj-watcher (1.2.2-1) unstable; urgency=medium . * New usptream release: - remove generated GWT files from source (Closes: #752223), not used by application, those files are regenerated by build process. - remove unused Open Chart files with related secutiry issue CVE-2013-1636 Previous releases are not impacted by security issue as file was not used (Closes: #742859). * d/control: use Standards 3.9.5 Checksums-Sha1: 3026b6784ad1f809b2be5dcf393193a364749ec4 2294 biomaj-watcher_1.2.2-1.dsc 5470cdb94ec202930bd76a6aade16a669d035771 95073453 biomaj-watcher_1.2.2.orig.tar.gz af40b423d83961910077568a81c94aaca2fe92f6 34552 biomaj-watcher_1.2.2-1.debian.tar.xz c83eef379f6176139eee06a92eb5456d100cf515 17924136 biomaj-watcher_1.2.2-1_all.deb Checksums-Sha256: 1d9c0f823f02e90f04785dcadcf919b43cece3c616015adb2921c5011c8759be 2294 biomaj-watcher_1.2.2-1.dsc 9936e817f0699ac9081d28f3d9ca383a0c93f55bb3aab70405eb4378c61ca624 95073453 biomaj-watcher_1.2.2.orig.tar.gz d3e3ada876c68f1eb1da859a0e5b2b3a44529291df7c95d2bc2d9f4e67cba728 34552 biomaj-watcher_1.2.2-1.debian.tar.xz bb32a1d54dbe455b933d96370ed48aeea09e60b6653e8749eccd8334f6189de6 17924136 biomaj-watcher_1.2.2-1_all.deb Files: 4543a36032507380499ee41a37266328 17924136 contrib/science optional biomaj-watcher_1.2.2-1_all.deb cb03dc9e85cc303b4d5a884ed95c459b 2294 contrib/science optional biomaj-watcher_1.2.2-1.dsc de9f439ea0169d4980ba69352617558d 95073453 contrib/science optional biomaj-watcher_1.2.2.orig.tar.gz d9e4ed19b682a577bfd708a671dcdee2 34552 contrib/science optional biomaj-watcher_1.2.2-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJTp9VOAAoJEHjcaNsybYQ4C2wQAJ3ugd6IG36VzW/i5ld2uIVA VUAD/dR1ed7VVTsX19KoVj7mSWOSOAZ2+WdjJoSdYoEK1cm6TKU8nNZoQiTihlLA YvWJzCUN6sFAUnQTwp9qZNnq6/VvzQTlh9unZUTn0c/qB0eizdGOcA6BXBzWCnsj suL0Re5AsepEuczaXEkhEq9BFIl94fqX0vhqmi2F42XV1gqXSlu99viFdMw2u1FF MAFfOzwLpR1c4uC4yyaOElekNgT+jOcyWztQefyzL+ClLRzxORVsQ5bLTptZxqEz 2w/EK8t4LLipjVV7LAqn5hGTGJXTkuFQIG+kfBHfiY+QWSvPFFzuMSdmYsmm5UPH 9QzNSwc/jlPLNI5avn6/d4WZFEiGr9Zl10L5p6eyHp3F2qStRDwjsFfWJPXQZjdg E+g0goThmeHkGjKqV5mgPBwPVMDUz8VyhARK8dQvzSNdFN2WlfvGn7ns7TnGlPfb LFbaZowqQSnwahxCBD0xzleq9SHnB4+bUuxskEEiMxVdLt7DrVluWdu3PRA3lL+n wm/ln7unBu/WKnobwQiM9vwMx3M/jiEntUvTafmE2zMqTogto0rP6GIgK1tbC8hD p40QOFZSh1t+N+jkGYj8ucgIDzmi/dqrUfXIq4al4IbAhsl4KkB5OW2oUSrsSsff 7bd1fhBgP5ExK5mGeCSK =QHAK -----END PGP SIGNATURE-----
--- End Message ---
