Package: gajim Version: 0.16.5-2 Severity: normal Control: affects -1 python-gnupg
gajim ships: /usr/share/gajim/src/common/gnupg.py However, this is just a copy of python-gnupg, which ships it in /usr/lib/python2.7/dist-packages/gnupg.py It would be better to avoid shipping this file in gajim and to make the dependency on python-gnupg explicit that it can be maintained properly in one place, as described in debian policy 4.13. This appears to already be known in https://anonscm.debian.org/viewvc/secure-testing/data/embedded-code-copies?view=co Regards, --dkg -- System Information: Debian Release: stretch/sid APT prefers testing-debug APT policy: (500, 'testing-debug'), (500, 'testing'), (200, 'unstable-debug'), (200, 'unstable'), (1, 'experimental-debug'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.7.0-1-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages gajim depends on: ii dnsutils 1:9.10.3.dfsg.P4-10.1 ii python-gtk2 2.24.0-5 ii python-nbxmpp 0.5.3-1 ii python-openssl 16.1.0-1 ii python-pyasn1 0.1.9-2 pn python:any <none> Versions of packages gajim recommends: ii alsa-utils 1.1.2-1 ii ca-certificates 20160104 ii dbus 1.10.10-1 ii notification-daemon 3.20.0-1 ii pulseaudio-utils 9.0-3 ii python-crypto 2.6.1-6+b1 ii python-dbus 1.2.4-1 Versions of packages gajim suggests: pn aspell-en | aspell-dictionary <none> ii avahi-daemon 0.6.32-1 pn dvipng <none> ii gnome-keyring 3.20.0-3 pn gstreamer0.10-plugins-ugly <none> pn kwalletcli <none> ii libgtkspell0 2.0.16-1.1 ii libxss1 1:1.2.2-1 pn nautilus-sendto <none> ii network-manager 1.4.0-4 pn python-avahi <none> ii python-gconf 2.28.1+dfsg-1.1 ii python-gnome2 2.28.1+dfsg-1.1 pn python-gnomekeyring <none> pn python-gupnp-igd <none> pn python-kerberos <none> ii python-pycurl 7.43.0-1 ii texlive-latex-base 2016.20160819-2 -- no debconf information