Package: sponsorship-requests Severity: normal Control: block 890119 by -1 Control: tag 890119 + pending Control: tag -1 + security
Hi,
I'm looking for a sponsor for this NMU against youtube-dl.
It removes youtube-dl's built-in autoupdate mechanism, whose security
is unclear and which is defunct on Debian anyhow (see #890119 for details).
@Rogério: This exactly adds the patch I sent to the packaging repository in
https://github.com/rbrito/pkg-youtube-dl/pull/2
However, since the state of the packaging repository is inconsistent
with what is in the Debian archive, you will need to push to the
repository, merge my PR, and then manually grab the updated changelog.
The updated version of the package is available on mentors.d.n :
https://mentors.debian.net/package/youtube-dl
https://mentors.debian.net/debian/pool/main/y/youtube-dl/youtube-dl_2018.01.27-1.1.dsc
Note that there are 2 minor issues in the package that I did not change:
- The package still uses dh 10
I have no idea whether the maintainer wants to switch to dh 11
- groff throws a warning on the youtube-dl(1) manpage (lintian tag
manpage-has-errors-from-man), but I believe this is out of scope for this NMU.
Best,
nicoo
-- System Information:
Debian Release: buster/sid
APT prefers testing
APT policy: (900, 'testing'), (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.14.0-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL
set to en_US.UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set
to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
signature.asc
Description: PGP signature
