On Wed, 2016-12-21 at 22:49 -0500, Theodore Ts'o wrote: > fixed 847575 1.43.3-1 > thanks > > On Wed, Dec 21, 2016 at 11:57:43PM +0000, Ben Hutchings wrote: > > > > > > I intended to prepare a patch but found that e2fsprogs no longer builds > > > the static binary using dietlibc as of 1.43~WIP.2016.05.12-1, so this > > > bug can be closed. > > > > Oops, sorry for the wrong version. > > I noticed you reopened this and marked this as still being a problem > in e2fsprogs/1.42.12-2 (it actually _is_ fixed in e2fsprogs/1.43.3-1). > Is it worth trying to fix this in Debian Stable? Especially given > that existence of snapshots.debian.org, the sources for dietlibc will > always be available one way or another --- and that might be good > enough for GPL compliance.
I think that snapshot.debian.org should be sufficient to keep Debian itself in compliance, but not any downstream commercial distributors. So all GPL sources should be available in the same suite, and Built- Using provides the information that dak needs to ensure that. As it is, e2fsck-static in jessie has been built with dietlibc 0.33~cvs20120325-6, but dietlibc has had a security update since then so that version is no longer present. (That issue didn't affect e2fsck-static so it hasn't been binNMU'd.) I think this could be resolved in stable simply by binNMU'ing e2fsck- static for the architectures where it uses dietlibc. Ben. -- Ben Hutchings Humour is the best antidote to reality.
signature.asc
Description: This is a digitally signed message part
