Bug#986216: buster-pu: package dwarf-fortress/0.44.12+dfsg1-0+deb10u1
Package: release.debian.org Severity: normal Tags: buster User: release.debian@packages.debian.org Usertags: pu [ Reason ] It has been noted in #986119 that the upstream release tarballs for dwarf-fortress include shared libraries but no corresponding source code is available. The shared libraries in question are licensed under GPL and thus not distributable without source code. The affected files are not shipped in any binary packages. This update fixes the issue by repacking the source tarballs to exclude those files. [ Impact ] The package currently in buster is not distributable in its current form, so it has to be either updated or entirely removed from buster to cease violating the licenses of the affected files. [ Tests ] The now excluded files were not shipped in any binary package or used in the build process. Their removal should not have any affect on the binary packages. I confirmed (using diffoscope) that the built debian packages do not differ in content except in expected ways due to changed package metadata. I also manually confirmed that the game can be successfully started and basic interactions inside the game still work. [ Risks ] Since the removed files are not part of any binary packages, it can be easily confirmed that their removal has no negative effect. I see virtually no risk introduced by this update. [ Checklist ] [x] *all* changes are documented in the d/changelog [x] I reviewed all changes and I approve them [x] attach debdiff against the package in (old)stable [x] the issue is verified as fixed in unstable [ Changes ] The source tarball has been repacked to exclude these files: * libs/libgcc_s.so.1 * libs/libstdc++.so.6 * libs/libgcc_s.so.1 * libs/libstdc++.so.6 Additionally a note about the repacked tarball has been added to debian/copyright and the version mangling in debian/watch has been updated to deal with the new +dsfg1 version suffix. Binärdateien /tmp/OJJcX56xZH/dwarf-fortress-0.44.12/amd64/libs/libgcc_s.so.1 und /tmp/JM3ObfSHmq/dwarf-fortress-0.44.12+dfsg1/amd64/libs/libgcc_s.so.1 sind verschieden. Binärdateien /tmp/OJJcX56xZH/dwarf-fortress-0.44.12/amd64/libs/libstdc++.so.6 und /tmp/JM3ObfSHmq/dwarf-fortress-0.44.12+dfsg1/amd64/libs/libstdc++.so.6 sind verschieden. diff -Nru dwarf-fortress-0.44.12/debian/changelog dwarf-fortress-0.44.12+dfsg1/debian/changelog --- dwarf-fortress-0.44.12/debian/changelog 2018-07-08 15:03:52.0 +0200 +++ dwarf-fortress-0.44.12+dfsg1/debian/changelog 2021-03-31 19:01:19.0 +0200 @@ -1,3 +1,10 @@ +dwarf-fortress (0.44.12+dfsg1-0+deb10u1) buster; urgency=high + + * Remove unnecessary code copies with license violations from source +tarball. (Closes: #986119) + + -- Sven Bartscher Wed, 31 Mar 2021 19:01:19 +0200 + dwarf-fortress (0.44.12-1) unstable; urgency=medium * New upstream version diff -Nru dwarf-fortress-0.44.12/debian/copyright dwarf-fortress-0.44.12+dfsg1/debian/copyright --- dwarf-fortress-0.44.12/debian/copyright 2018-07-08 14:13:41.0 +0200 +++ dwarf-fortress-0.44.12+dfsg1/debian/copyright 2021-03-31 19:01:19.0 +0200 @@ -11,6 +11,15 @@ do not grant all freedoms required by the DFSG. No modifications of the included binaries are permitted, and the binaries are not distributed with source code. +Comment: + Some files have been removed from the original source tarballs, because + they are licensed under the GPL, but no source is available for them. +Files-Excluded-amd64: + libs/libgcc_s.so.1 + libs/libstdc++.so.6 +Files-Excluded-i386: + libs/libgcc_s.so.1 + libs/libstdc++.so.6 Files: * Copyright: 2002-2018 Tarn Adams. All rights reserved. diff -Nru dwarf-fortress-0.44.12/debian/watch dwarf-fortress-0.44.12+dfsg1/debian/watch --- dwarf-fortress-0.44.12/debian/watch 2018-06-24 13:22:23.0 +0200 +++ dwarf-fortress-0.44.12+dfsg1/debian/watch 2021-03-31 19:01:19.0 +0200 @@ -1,7 +1,7 @@ version=4 -opts="uversionmangle=s/^/0./,component=amd64" \ +opts="uversionmangle=s/^/0./,dversionmangle=s/\+dfsg\d+//,component=amd64" \ http://bay12games.com/dwarves/older_versions.html \ df_(\d+)_(\d+)_linux@ARCHIVE_EXT@ debian -opts="uversionmangle=s/^/0./,component=i386" \ +opts="uversionmangle=s/^/0./,dversionmangle=s/\+dfsg\d+//,component=i386" \ http://bay12games.com/dwarves/older_versions.html \ df_(\d+)_(\d+)_linux32@ARCHIVE_EXT@ same Binärdateien /tmp/OJJcX56xZH/dwarf-fortress-0.44.12/i386/libs/libgcc_s.so.1 und /tmp/JM3ObfSHmq/dwarf-fortress-0.44.12+dfsg1/i386/libs/libgcc_s.so.1 sind verschieden. Binärdateien /tmp/OJJcX56xZH/dwarf-fortress-0.44.12/i386/libs/libstdc++.so.6 und /tmp/JM3ObfSHmq/dwarf-fortress-0.44.12+dfsg1/i386/libs/libstdc++.so.6 sind verschieden.
Bug#986172: unblock: dwarf-fortress/0.47.04+dfsg1-1
Control: tags -1 - moreinfo Hi, Am 31.03.21 um 09:55 schrieb Sebastian Ramacher: > ACK, please remove the moreinfo tag once the new version is available in > unstable. 0.47.04+dfsg1-1 has just been accepted into unstable. Regards Sven
Bug#986172: unblock: dwarf-fortress/0.47.04+dfsg1-1
Control: retitle -1 unblock: dwarf-fortress/0.47.04+dfsg1-1 On Tue, 30 Mar 2021 22:32:08 +0200 Sven Bartscher wrote: > Package: release.debian.org > Severity: normal > User: release.debian@packages.debian.org > Usertags: unblock > > Please unblock package dwarf-fortress > > [...] > > unblock dwarf-fortress/0.47_04+dfsg1-1 I typoed the package version in my initial report. The version to be unblocked is: unblock dwarf-fortress/0.47.04+dfsg1-1 The updated version has not been uploaded to unstable yet. Regards Sven
Bug#986172: unblock: dwarf-fortress/0.47_04+dfsg1-1
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Please unblock package dwarf-fortress [ Reason ] It has been noted in #986119 that the upstream release tarballs for dwarf-fortress include shared libraries but no corresponding source code is available. The shared libraries in question are licensed under GPL and thus not distributable without source code. The affected files are not shipped in any binary packages. This update fixes the issue by repacking the source tarballs to exclude those files. [ Impact ] The package is not distributable in its current form, so it has to be either updated or entirely removed from testing to cease violating the licenses of the affected files. [ Tests ] The now excluded files were not shipped in any binary package or used in the build process. Their removal should not have any affect on the binary packages. I confirmed (using diffoscope) that the built debian packages do not differ in content except in expected ways due to changed package metadata and changes in the generaed manpage due to a newer pandoc version being used in the build. I also manually confirmed that the game can be successfully started and basic interactions inside the game still work. [ Risks ] Since the removed files are not part of any binary packages, it can be easily confirmed that their removal has no negative effect. I see virtually no risk introduced by this update. [ Checklist ] [x] all changes are documented in the d/changelog [x] I reviewed all changes and I approve them [x] attach debdiff against the package in testing unblock dwarf-fortress/0.47_04+dfsg1-1 Binärdateien /tmp/x4E2O1qvMn/dwarf-fortress-0.47.04/amd64/libs/libgcc_s.so.1 und /tmp/ag24SxYJ0c/dwarf-fortress-0.47.04+dfsg1/amd64/libs/libgcc_s.so.1 sind verschieden. Binärdateien /tmp/x4E2O1qvMn/dwarf-fortress-0.47.04/amd64/libs/libstdc++.so.6 und /tmp/ag24SxYJ0c/dwarf-fortress-0.47.04+dfsg1/amd64/libs/libstdc++.so.6 sind verschieden. diff -Nru dwarf-fortress-0.47.04/debian/changelog dwarf-fortress-0.47.04+dfsg1/debian/changelog --- dwarf-fortress-0.47.04/debian/changelog 2020-03-28 18:48:06.0 +0100 +++ dwarf-fortress-0.47.04+dfsg1/debian/changelog 2021-03-30 19:04:37.0 +0200 @@ -1,3 +1,10 @@ +dwarf-fortress (0.47.04+dfsg1-1) unstable; urgency=high + + * Remove unnecessary code copies with license violations from source +tarball. (Closes: #986119) + + -- Sven Bartscher Tue, 30 Mar 2021 19:04:37 +0200 + dwarf-fortress (0.47.04-1) unstable; urgency=low * New upstream version diff -Nru dwarf-fortress-0.47.04/debian/copyright dwarf-fortress-0.47.04+dfsg1/debian/copyright --- dwarf-fortress-0.47.04/debian/copyright 2020-03-28 18:48:06.0 +0100 +++ dwarf-fortress-0.47.04+dfsg1/debian/copyright 2021-03-30 19:04:37.0 +0200 @@ -11,6 +11,15 @@ do not grant all freedoms required by the DFSG. No modifications of the included binaries are permitted, and the binaries are not distributed with source code. +Comment: + Some files have been removed from the original source tarballs, because + they are licensed under the GPL, but no source is available for them. +Files-Excluded-amd64: + libs/libgcc_s.so.1 + libs/libstdc++.so.6 +Files-Excluded-i386: + libs/libgcc_s.so.1 + libs/libstdc++.so.6 Files: * Copyright: 2002-2020 Tarn Adams. All rights reserved. diff -Nru dwarf-fortress-0.47.04/debian/watch dwarf-fortress-0.47.04+dfsg1/debian/watch --- dwarf-fortress-0.47.04/debian/watch 2020-03-28 18:48:06.0 +0100 +++ dwarf-fortress-0.47.04+dfsg1/debian/watch 2021-03-30 19:04:37.0 +0200 @@ -1,7 +1,7 @@ version=4 -opts="uversionmangle=s/^/0./,component=amd64" \ +opts="uversionmangle=s/^/0./,dversionmangle=s/\+dfsg\d+//,component=amd64" \ https://bay12games.com/dwarves/older_versions.html \ df_(\d+)_(\d+)_linux@ARCHIVE_EXT@ debian -opts="uversionmangle=s/^/0./,component=i386" \ +opts="uversionmangle=s/^/0./,dversionmangle=s/\+dfsg\d+//,component=i386" \ https://bay12games.com/dwarves/older_versions.html \ df_(\d+)_(\d+)_linux32@ARCHIVE_EXT@ same Binärdateien /tmp/x4E2O1qvMn/dwarf-fortress-0.47.04/i386/libs/libgcc_s.so.1 und /tmp/ag24SxYJ0c/dwarf-fortress-0.47.04+dfsg1/i386/libs/libgcc_s.so.1 sind verschieden. Binärdateien /tmp/x4E2O1qvMn/dwarf-fortress-0.47.04/i386/libs/libstdc++.so.6 und /tmp/ag24SxYJ0c/dwarf-fortress-0.47.04+dfsg1/i386/libs/libstdc++.so.6 sind verschieden.
Bug#775195: unblock: haskell-hgettext/0.1.30-5
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Please unblock package haskell-hgettext haskell-hgettext is affected by the RC bug #774802. This bug prevents any package that uses hgettext in a certain way to compile, if compiling with cabal-install. This is a very common case and most people are affected by this bug, wich makes haskell-hgettext pretty useless, since you can't compile any packages using it, without using strange workarounds like uninstalling libghc-cabal-dev or calling the setup script directly. The changelog since 0.1.30-2 (which is currently in jessie) reads as follows: haskell-hgettext (0.1.30-5) unstable; urgency=high * Same version as 0.1.30-4, but for unstable * Fixes incompatibilities with cabal-install when hgettext and cabal-install by ensuring that they are built against the same version of libghc-cabal-dev. For more detail look at he bug report #774802. -- Sven Bartscher sven.bartsc...@weltraumschlangen.de Fri, 09 Jan 2015 18:55:39 +0100 haskell-hgettext (0.1.30-4) experimental; urgency=high [ Sven Bartscher ] * Assure that hgettext is built against the right version of cabal. -- Joachim Breitner nome...@debian.org Wed, 07 Jan 2015 16:18:45 +0100 haskell-hgettext (0.1.30-3) experimental; urgency=medium * Depend on haskell-devscripts 0.9, found in experimental -- Joachim Breitner nome...@debian.org Sat, 20 Dec 2014 17:10:49 +0100 In version 0.1.30-3, the changelog says that the dependency on haskell-devscripts was bumped. This change is not included in 0.1.30-5, so it doesn't contain any changes unrelated to this bug. The version 0.1.30-5 is exactly the same as 0.1.30-4, but 0.1.30-4 was accidentally uploaded to experimental, so we had to re-upload it to unstable. The changelog does not mention, that a autopkgtest was added to haskell-hgettext. This is necessary, because the fix for the bug, mentioned above, includes that a Build-Dependency of haskell-hgettext needs to be upgraded under certain circumstances. The autopkgtest makes shure that haskell-hgettext is build against a working version. The debdiff between 0.1.30-2 and 0.1.30-5, generated with `debdiff haskell-hgettext_0.1.30-2.dsc haskell-hgettext_0.1.30-5.dsc`: diff -Nru haskell-hgettext-0.1.30/debian/changelog haskell-hgettext-0.1.30/debian/changelog --- haskell-hgettext-0.1.30/debian/changelog2014-10-05 13:01:40.0 +0200 +++ haskell-hgettext-0.1.30/debian/changelog2015-01-09 19:19:06.0 +0100 @@ -1,3 +1,25 @@ +haskell-hgettext (0.1.30-5) unstable; urgency=high + + * Same version as 0.1.30-4, but for unstable + * Fixes incompatibilities with cabal-install when hgettext and +cabal-install by ensuring that they are built against the same version +of libghc-cabal-dev. For more detail look at he bug report #774802. + + -- Sven Bartscher sven.bartsc...@weltraumschlangen.de Fri, 09 Jan 2015 18:55:39 +0100 + +haskell-hgettext (0.1.30-4) experimental; urgency=high + + [ Sven Bartscher ] + * Assure that hgettext is built against the right version of cabal. + + -- Joachim Breitner nome...@debian.org Wed, 07 Jan 2015 16:18:45 +0100 + +haskell-hgettext (0.1.30-3) experimental; urgency=medium + + * Depend on haskell-devscripts 0.9, found in experimental + + -- Joachim Breitner nome...@debian.org Sat, 20 Dec 2014 17:10:49 +0100 + haskell-hgettext (0.1.30-2) unstable; urgency=medium * Correct wrong VCS-Darcs field diff -Nru haskell-hgettext-0.1.30/debian/control haskell-hgettext-0.1.30/debian/control --- haskell-hgettext-0.1.30/debian/control 2014-10-05 13:01:40.0 +0200 +++ haskell-hgettext-0.1.30/debian/control 2015-01-09 19:10:12.0 +0100 @@ -14,17 +14,20 @@ , libghc-uniplate-prof , libghc-src-exts-dev , libghc-src-exts-prof - , libghc-cabal-dev - , libghc-cabal-prof + , libghc-cabal-dev (= 1.20) + , libghc-cabal-prof (= 1.20) +# The -prof and -doc packages also need the constraint, because ghc +# provieds libghc-cabal-prof and -doc Build-Depends-Indep: ghc-doc , libghc-setlocale-doc , libghc-uniplate-doc , libghc-src-exts-doc - , libghc-cabal-doc + , libghc-cabal-doc (= 1.20) Standards-Version: 3.9.5 Homepage: http://hackage.haskell.org/package/hgettext Vcs-Darcs: http://darcs.debian.org/pkg-haskell/haskell-hgettext Vcs-Browser: http://darcs.debian.org/cgi-bin/darcsweb.cgi?r=pkg-haskell/haskell-hgettext +Testsuite: autopkgtest X-Description: Gettext bindings for haskell This package provides bindings to gettext in haskell. diff -Nru haskell-hgettext-0.1.30/debian/tests/cabal-install-compatibility haskell-hgettext-0.1.30/debian/tests/cabal-install-compatibility --- haskell-hgettext-0.1.30/debian/tests/cabal-install-compatibility 1970-01-01 01:00:00.0 +0100 +++ haskell-hgettext-0.1.30/debian/tests/cabal-install-compatibility
Re: Is there still hope for hgettext?
On Wed, 7 Jan 2015 21:52:59 +0100 Ivo De Decker iv...@debian.org wrote: Hi, On Wed, Jan 07, 2015 at 08:21:48PM +0100, Sven Bartscher wrote: We (the haskell-team) recently fixed an RC-bug[1] in haskell-hgettext. We uploaded the fix to experimental and were wondering if there’s still a chance to get it into jessie, though we don’t think it’s very important to get it into jessie. There certainly is a chance (see below). What do you mean when you write we don't think it's very important to get it into jessie? If the severity of the bug isn't correct, you should downgrade it. If the bug is really grave, and it won't be fixed, then haskell-hgettext will be removed from jessie and not be in the release. But you can also just fix the bug. With we don't think it's very important to get it into jessie I meant that it wouldn't be a catastrophe if haskell-hgettext wouldn't be in jessie. But having it in jessie would be better. So can you tell, if there’s a chance for hgettext, before we prepare a proper release for unstable and file a bug or is it clear that hgettext won’t make it? As stated in the freeze policy, targeted fixes for RC bugs are still accepted for jessie. So if you have a targeted fix, you can upload it to unstable and file an unblock request (using reportbug). In that case, there is no need to remove haskell-hgettext from jessie, which is probably the preferred way forward for you. Thanks for clarifying. Regards Sven pgpUQ4KnPlMni.pgp Description: Digitale Signatur von OpenPGP
Is there still hope for hgettext?
Greetings, We (the haskell-team) recently fixed an RC-bug[1] in haskell-hgettext. We uploaded the fix to experimental and were wondering if there’s still a chance to get it into jessie, though we don’t think it’s very important to get it into jessie. So can you tell, if there’s a chance for hgettext, before we prepare a proper release for unstable and file a bug or is it clear that hgettext won’t make it? Regards Sven [1]: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774802 -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/6e581ed2-515d-48e3-83e1-9923b2310...@weltraumschlangen.de
