[DebianGIS-dev] Bug#603470: Bug#603470: libmapnik0.7: package linked against broken external AGG
On Sun, Nov 14, 2010 at 02:15:00PM +0100, Sven Geggus wrote: Package: libmapnik0.7 Severity: important The current Version of Mapnik in Debian (squeeze and sid) has been linked against the AGG library provided by the system. Looks like this library (2.5.x) is more or less unmaintained. For this reason mapnik provides a custom Version of the AGG library which fixes the bugs which causes mapnik to hang. The discussion about this topic can be found here: http://www.mail-archive.com/mapnik-us...@lists.berlios.de/msg02953.html I know that the debian policy is to always use external libraries, but this renders the provided package more or less unusable. Unfortunately I don't have patches for AGG to fix this without breaking the debian policy. First of all, the use of non-embedded libraries is not mandatory. Many programs have similar problems and we have to coexists with them, unfortunately. If a patch can be provided (upstream or not) to fix system-wide issues and is not, it is unfortunate, but it happens. That said, the AGG case is quite unfortunate, because AGG 2.5 is GPL2 and AGG 2.4 is MIT licensed. That implies that the whole mapnik should be considered GPL-2 released and that should be noted. This is also something bad, because it violates the original upstream will IMHO. Note also that the embedded copy is a 2.3 or 2.4 version, and we used the same approach for mapserver to avoid those kind of problems. Seriously someone should consider an AGG fork from 2.4 which is something maybe mapserver folks already did. My best guessing is moving to the embedded copy if resulting issues are grave enough to compromise its use. Maybe David can help about that. -- Francesco P. Lovergine ___ Pkg-grass-devel mailing list Pkg-grass-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-grass-devel
[DebianGIS-dev] Bug#600308: Bug#600308: Q: plan to put new version to experimental
On Sat, Nov 13, 2010 at 01:59:18AM +0900, Hideki Yamane wrote: Hi, No, 1.4 is the version included in squeeze. The 1.5 vesion can be targeted for experimental and future backports. We are in freezing. It's reasonable, if we put new version to unstabl and would find problem in testing then, fixing it is complicated. Put new one into experimental is good manner. So, the question is when would you put it into experimental? And if there is the blockers, what is that? # Some users cannot wait to try it :) I'm looking for a decent workflow to merge current git-svn tree with the 1.5 upstream tree. -- Francesco P. Lovergine ___ Pkg-grass-devel mailing list Pkg-grass-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-grass-devel
[DebianGIS-dev] Bug#603470: Bug#603470: libmapnik0.7: package linked against broken external AGG
Francesco P. Lovergine schrieb am Montag, den 15. November um 11:19 Uhr: This is also something bad, because it violates the original upstream will IMHO. Yes it does because Mapnik is licenced under LGPL Note also that the embedded copy is a 2.3 or 2.4 version, and we used the same approach for mapserver to avoid those kind of problems. Its a patched version of 2.4 Seriously someone should consider an AGG fork from 2.4 which is something maybe mapserver folks already did. I posted an URL to the discussion of the problem. In there it has been mentioned, that they consider 2.5 dead anyway and that currently 2.4 development ist going on here: http://agg.svn.sourceforge.net/viewvc/agg/agg-2.4/ See http://www.mail-archive.com/mapnik-us...@lists.berlios.de/msg02970.html My best guessing is moving to the embedded copy if resulting issues are grave enough to compromise its use. There are occasional hangs of the rendering library resulting in 100% CPU usage. Sven -- I'm a bastard, and proud of it (Linus Torvalds, Wednesday Sep 6, 2000) /me is gig...@ircnet, http://sven.gegg.us/ on the Web ___ Pkg-grass-devel mailing list Pkg-grass-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-grass-devel
[DebianGIS-dev] Bug#603470: libmapnik0.7: package linked against broken external AGG
On Mon, Nov 15, 2010 at 03:45:01PM +0100, David Paleino wrote: It's a 2.3, at least from what agg/copying says. Seriously someone should consider an AGG fork from 2.4 which is something maybe mapserver folks already did. Francesco, do you know if such a fork has been officially announced, with proper releases and such? It might make sense to provide a separate package (but this is surely post-Squeeze) to link against. So that we don't need N copies of libagg spread around the archive. Current committers are simply working on the 2.4 tree, due to obvious license concerns. You can simply check https://agg.svn.sourceforge.net/svnroot/agg and consult the mailing list to check. Maxim has simply lost interest and current working happens onto a specific 2.4 branch. I wonder if maintaining 2.5 in Debian makes sense. Also notes that agg is essentially a template library, so distributing shlibs is a non-sense, because instances are defined by use. That's the reason to have a -dev package only. There's nothing like a 'system wide' library in proper sense. -- Francesco P. Lovergine ___ Pkg-grass-devel mailing list Pkg-grass-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-grass-devel
[DebianGIS-dev] r2946 - packages/gdal/branches/1.7/debian
Author: frankie Date: 2010-11-15 16:51:15 + (Mon, 15 Nov 2010) New Revision: 2946 Modified: packages/gdal/branches/1.7/debian/changelog packages/gdal/branches/1.7/debian/control Log: New upstream release. Modified: packages/gdal/branches/1.7/debian/changelog === --- packages/gdal/branches/1.7/debian/changelog 2010-10-14 15:08:10 UTC (rev 2945) +++ packages/gdal/branches/1.7/debian/changelog 2010-11-15 16:51:15 UTC (rev 2946) @@ -1,9 +1,10 @@ -gdal (1.7.2-3) unstable; urgency=low +gdal (1.7.3-1) experimental; urgency=low - * Uploaded to unstable. + * New upstream release. This is a bug fixing update. + * Policy bumped to 3.9.1, no changes required. * Added sample programs to python-gdal documentation. - -- Francesco Paolo Lovergine fran...@debian.org Wed, 12 May 2010 17:28:58 +0200 + -- Francesco Paolo Lovergine fran...@debian.org Mon, 15 Nov 2010 17:50:27 +0100 gdal (1.7.2-2) experimental; urgency=low Modified: packages/gdal/branches/1.7/debian/control === --- packages/gdal/branches/1.7/debian/control 2010-10-14 15:08:10 UTC (rev 2945) +++ packages/gdal/branches/1.7/debian/control 2010-11-15 16:51:15 UTC (rev 2946) @@ -10,7 +10,7 @@ python-central (= 0.5), libcurl4-gnutls-dev, libsqlite3-dev, libogdi3.2-dev, ruby, ruby1.8-dev, chrpath, swig, libtool (= 1.5.24-2), patch, libexpat1-dev, libproj-dev, libdap-dev, libxml2-dev, libspatialite-dev (= 2.4.0~rc2-4) -Standards-Version: 3.8.4 +Standards-Version: 3.9.1 XS-Python-Version: all Homepage: http://www.gdal.org/ Vcs-Browser: http://svn.debian.org/viewsvn/pkg-grass/packages/gdal/trunk ___ Pkg-grass-devel mailing list Pkg-grass-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-grass-devel
[DebianGIS-dev] Bug#603470: libmapnik0.7: package linked against broken external AGG
Dear Security and Release Teams, On Mon, 15 Nov 2010 12:07:56 +0100, Sven Geggus wrote: Francesco P. Lovergine schrieb am Montag, den 15. November um 11:19 Uhr: My best guessing is moving to the embedded copy if resulting issues are grave enough to compromise its use. There are occasional hangs of the rendering library resulting in 100% CPU usage. I'm writing to you because of #603470. The obvious solution is to link against the internal patched libagg, and this is what mapnik upstream is expecting us to do. The AGG+Mapnik case is unfortunate; the problem is twofold: upstream relicensed the code from MIT to GPL-2 from versions 2.4 → 2.5 (and Mapnik is LGPL, so we're basically restricting its usage when linking to the GPL library), and development of AGG has now stopped. It seems like there are some forks in the wild of the 2.4 branch (because of license concerns). Mapnik embeds a patched 2.3 version of AGG -- I'd like to know if: - security team: would it be acceptable to use the embedded copy? - release team: would such a change have a freeze exception granted? (attaching diff -- the only change is the drop of INTERNAL_LIBAGG=no, but I split it to make it easier to read in future) Thank you, David -- . ''`. Debian developer | http://wiki.debian.org/DavidPaleino : :' : Linuxer #334216 --|-- http://www.hanskalabs.net/ `. `'` GPG: 1392B174 | http://deb.li/dapal `- 2BAB C625 4E66 E7B8 450A C3E1 E6AA 9017 1392 B174 diff --git a/debian/changelog b/debian/changelog index 119090b..019f990 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,9 @@ +mapnik (0.7.1-3) UNRELEASED; urgency=low + + * Compile using internal copy of libagg. (Closes: #603470) + + -- David Paleino da...@debian.org Mon, 15 Nov 2010 16:05:05 +0100 + mapnik (0.7.1-2) unstable; urgency=low * debian/patches/03-fix_ImportError_mips.patch added, fixes diff --git a/debian/control b/debian/control index 678646c..dcd8651 100644 --- a/debian/control +++ b/debian/control @@ -26,7 +26,6 @@ Build-Depends: libfribidi-dev, libgdal1-dev, libxml2-dev, - libagg-dev, libicu-dev, libcairo2-dev, libcairomm-1.0-dev, diff --git a/debian/rules b/debian/rules index a19bd94..067d3c2 100755 --- a/debian/rules +++ b/debian/rules @@ -5,7 +5,12 @@ #export DH_VERBOSE=1 # scons flags -SCONS_FLAGS=INPUT_PLUGINS=raster,sqlite,postgis,ogr,shape,osm,gdal,kismet PROJ_INCLUDES=/usr/include PROJ_LIBS=/usr/lib INTERNAL_LIBAGG=no SYSTEM_FONTS=/usr/share/fonts/truetype/ttf-dejavu XMLPARSER=libxml2 DESTDIR=$(CURDIR)/debian/tmp PREFIX=/usr LIB_DIR_NAME=/mapnik/0.7 +SCONS_FLAGS := INPUT_PLUGINS=raster,sqlite,postgis,ogr,shape,osm,gdal,kismet +SCONS_FLAGS += PROJ_INCLUDES=/usr/include PROJ_LIBS=/usr/lib +SCONS_FLAGS += SYSTEM_FONTS=/usr/share/fonts/truetype/ttf-dejavu +SCONS_FLAGS += XMLPARSER=libxml2 +SCONS_FLAGS += DESTDIR=$(CURDIR)/debian/tmp +SCONS_FLAGS += PREFIX=/usr LIB_DIR_NAME=/mapnik/0.7 CFLAGS = -Wall -g signature.asc Description: PGP signature ___ Pkg-grass-devel mailing list Pkg-grass-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-grass-devel
[DebianGIS-dev] Bug#603470: libmapnik0.7: package linked against broken external AGG
On Mon, Nov 15, 2010 at 06:44:11PM +0100, David Paleino wrote: - security team: would it be acceptable to use the embedded copy? Note also that AGG even is a template package for C++, so basically it is not something that one would consider a shlib. It should be considered as embedded by default in any case. -- Francesco P. Lovergine ___ Pkg-grass-devel mailing list Pkg-grass-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-grass-devel
[DebianGIS-dev] [SCM] tilestache branch, master, updated. upstream/1.0.1-12-g56f2815
The following commit has been merged in the master branch: commit 1edf79fba45b90d4272926cac4af4d71de3ab694 Merge: 114cba93b41e40e1e77bd160c43e416948a4fde3 4860a1f88c9ba0d2a3094d377648ca66036ec7e1 Author: David Paleino da...@debian.org Date: Mon Nov 15 21:22:52 2010 +0100 Merge commit 'upstream/1.2.2' -- map tiles caching system ___ Pkg-grass-devel mailing list Pkg-grass-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-grass-devel
[DebianGIS-dev] [SCM] tilestache branch, master, updated. upstream/1.0.1-12-g56f2815
The following commit has been merged in the master branch: commit 39faa91362aaa1bdd645f15f9adc351696a5b8a2 Author: David Paleino da...@debian.org Date: Mon Nov 15 21:24:07 2010 +0100 New version diff --git a/debian/changelog b/debian/changelog index 7fb0d43..2fc86c3 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,4 +1,4 @@ -tilestache (1.1.3-1) UNRELEASED; urgency=low +tilestache (1.2.2-1) UNRELEASED; urgency=low * Initial release (Closes: #603050) -- map tiles caching system ___ Pkg-grass-devel mailing list Pkg-grass-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-grass-devel
[DebianGIS-dev] [SCM] tilestache branch, master, updated. upstream/1.0.1-12-g56f2815
The following commit has been merged in the master branch: commit 56f2815f54343f48362d7b7f28d3498e551a34bc Author: David Paleino da...@debian.org Date: Mon Nov 15 21:30:26 2010 +0100 Fix copyright file diff --git a/debian/copyright b/debian/copyright index 5b7adaf..1319a1f 100644 --- a/debian/copyright +++ b/debian/copyright @@ -6,15 +6,41 @@ Copyright: © 2010, David Paleino da...@debian.org License: BSD Files: * -Copyright: ©, Michal Migurski m...@stamen.com +Copyright: © 2010, Michal Migurski m...@stamen.com + © 2010, Aaron Cope License: BSD +X-Comment: not yet included in the tarball, + https://github.com/migurski/TileStache/commit/30aeaa3c111e6c21bacbc6ad8276114bd85d9305 Files: TileStache/Goodies/Providers/DejaVuSansMono-alphanumeric.ttf Copyright: © 2003, Bitstream, Inc. License: other License: BSD -X-Comment: TODO, mail written to upstream to know exact licensing terms + Redistribution and use in source and binary forms, with or without + modification, are permitted provided that the following conditions are met: + . + - Redistributions of source code must retain the above copyright notice, + this list of conditions and the following disclaimer. + . + - Redistributions in binary form must reproduce the above copyright notice, + this list of conditions and the following disclaimer in the documentation + and/or other materials provided with the distribution. + . + - Neither the name of the project nor the names of its contributors may be + used to endorse or promote products derived from this software without + specific prior written permission. + . + THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS AS IS AND + ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED + WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE + DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE + FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL + DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR + SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER + CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, + OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE + OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. License: other Bitstream Vera Fonts Copyright -- map tiles caching system ___ Pkg-grass-devel mailing list Pkg-grass-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-grass-devel
[DebianGIS-dev] [SCM] tilestache branch, pristine-tar, updated. 14207162309cd628942c31ff9cf7834ebffffe29
The following commit has been merged in the pristine-tar branch: commit 14207162309cd628942c31ff9cf7834ebe29 Author: David Paleino da...@debian.org Date: Mon Nov 15 21:22:50 2010 +0100 pristine-tar data for tilestache_1.2.2.orig.tar.gz diff --git a/tilestache_1.2.2.orig.tar.gz.delta b/tilestache_1.2.2.orig.tar.gz.delta new file mode 100644 index 000..de15600 Binary files /dev/null and b/tilestache_1.2.2.orig.tar.gz.delta differ diff --git a/tilestache_1.2.2.orig.tar.gz.id b/tilestache_1.2.2.orig.tar.gz.id new file mode 100644 index 000..80593d9 --- /dev/null +++ b/tilestache_1.2.2.orig.tar.gz.id @@ -0,0 +1 @@ +4860a1f88c9ba0d2a3094d377648ca66036ec7e1 -- map tiles caching system ___ Pkg-grass-devel mailing list Pkg-grass-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-grass-devel
[DebianGIS-dev] [SCM] tilestache branch, master, updated. upstream/1.0.1-14-g002b7dd
The following commit has been merged in the master branch: commit 0a4b9ee8268cb74aafefec3de85c27080dd54b6c Author: David Paleino da...@debian.org Date: Mon Nov 15 22:07:56 2010 +0100 Remove the whole dir diff --git a/debian/rules b/debian/rules index bd5b4b9..dc495ae 100755 --- a/debian/rules +++ b/debian/rules @@ -12,7 +12,7 @@ PREFIX := $(CURDIR)/debian/tilestache/ override_dh_auto_install: dh_auto_install - rm -f $(PREFIX)/usr/share/tilestache/DejaVuSansMono-alphanumeric.ttf + rm -rf $(PREFIX)/usr/share/tilestache # rename the binaries for p in tilestache-seed.py tilestache-render.py; do \ -- map tiles caching system ___ Pkg-grass-devel mailing list Pkg-grass-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-grass-devel
[DebianGIS-dev] [SCM] tilestache branch, master, updated. upstream/1.0.1-14-g002b7dd
The following commit has been merged in the master branch: commit 002b7ddbc58008d98eec828137035b2cbab44c45 Author: David Paleino da...@debian.org Date: Mon Nov 15 22:14:30 2010 +0100 Fix lintian error on manpage diff --git a/debian/man/tilestache-seed.1 b/debian/man/tilestache-seed.1 index 68cc158..a393822 100644 --- a/debian/man/tilestache-seed.1 +++ b/debian/man/tilestache-seed.1 @@ -10,7 +10,7 @@ This manual page documents briefly the \fBtilestache-seed\fR command. \fBtilestache-seed\fR seeds a single layer in your TileStache configuration. No images are returned, but TileStache ends up with a pre-filled cache. Bounding box is given as a pair of lat/lon coordinates, e.g. 37.788 --122.349 37.833 -122.246. Output is a list of tile paths as they are +\-122.349 37.833 \-122.246. Output is a list of tile paths as they are created. .br Configuration, BBox, and Layer options are required. -- map tiles caching system ___ Pkg-grass-devel mailing list Pkg-grass-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-grass-devel
[DebianGIS-dev] [SCM] tilestache branch, master, updated. upstream/1.0.1-15-gf2c53fa
The following commit has been merged in the master branch: commit f2c53fa1f7989f614829a502fe5a65bc03ed47f8 Author: David Paleino da...@debian.org Date: Mon Nov 15 22:15:01 2010 +0100 Releasing to sid diff --git a/debian/changelog b/debian/changelog index 2fc86c3..204ed61 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,5 +1,5 @@ -tilestache (1.2.2-1) UNRELEASED; urgency=low +tilestache (1.2.2-1) unstable; urgency=low * Initial release (Closes: #603050) - -- David Paleino da...@debian.org Wed, 10 Nov 2010 18:20:57 +0100 + -- David Paleino da...@debian.org Mon, 15 Nov 2010 22:14:57 +0100 -- map tiles caching system ___ Pkg-grass-devel mailing list Pkg-grass-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-grass-devel
[DebianGIS-dev] [SCM] tilestache annotated tag, debian/1.2.2-1, created. debian/1.2.2-1
The annotated tag, debian/1.2.2-1 has been created at 5af9fedc4c95999aadb1d6ebd83ca2a583915d77 (tag) tagging f2c53fa1f7989f614829a502fe5a65bc03ed47f8 (commit) replaces upstream/1.2.2 tagged by David Paleino on Mon Nov 15 22:15:08 2010 +0100 - Shortlog Debian release -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.11 (GNU/Linux) iEYEABECAAYFAkzhotwACgkQ5qqQFxOSsXTnnwCfSiR52dWLtC4vLfPhGV0A6mmz l98An3/a/HmYUuckys2fuh8XveL9mTGl =ygtU -END PGP SIGNATURE- David Paleino (13): Initial commit Fix copyright info Add doc-base registration Use system font instead Rename the binaries Add manpages Oops, fix manpages path Merge commit 'upstream/1.2.2' New version Fix copyright file Remove the whole dir Fix lintian error on manpage Releasing to sid --- -- map tiles caching system ___ Pkg-grass-devel mailing list Pkg-grass-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-grass-devel
[DebianGIS-dev] [SCM] tilestache annotated tag, upstream/1.1.3, created. upstream/1.1.3
The annotated tag, upstream/1.1.3 has been created at 8a36e2118768bc478a52a0474f5bfb8e08b7fc7b (tag) tagging 3b73df9e7c8114438a407d6cf683fff92023ed5e (commit) replaces upstream/1.0.1 tagged by David Paleino on Wed Nov 10 18:19:22 2010 +0100 - Shortlog Upstream version 1.1.3 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.11 (GNU/Linux) iEYEABECAAYFAkza1BoACgkQ5qqQFxOSsXT6YgCgzEewAoUGBwatjjUufQ1nldGj Ak0AnAhAUGu8OJaZQLy5zZmmNIbXdI6r =khxN -END PGP SIGNATURE- David Paleino (1): Imported Upstream version 1.1.3 --- -- map tiles caching system ___ Pkg-grass-devel mailing list Pkg-grass-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-grass-devel
[DebianGIS-dev] [SCM] tilestache annotated tag, upstream/1.2.2, created. upstream/1.2.2
The annotated tag, upstream/1.2.2 has been created at 87268768ef09a214ecc168934eb7e001a9eb4227 (tag) tagging 4860a1f88c9ba0d2a3094d377648ca66036ec7e1 (commit) replaces upstream/1.1.3 tagged by David Paleino on Mon Nov 15 21:22:50 2010 +0100 - Shortlog Upstream version 1.2.2 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.11 (GNU/Linux) iEYEABECAAYFAkzhlpoACgkQ5qqQFxOSsXQBNgCeO2D78Y+fbx2GPxEqmUIq8lgZ 7g8AnAidiQhmVuQfqSFTJ/4+qOvOCJkE =1YMk -END PGP SIGNATURE- David Paleino (1): Imported Upstream version 1.2.2 --- -- map tiles caching system ___ Pkg-grass-devel mailing list Pkg-grass-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-grass-devel
