-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Package: libgtkol
Version: 1.4.1
Severity: serious
Justification: Policy 2.1, 2.2.1

libgtkol's upstream tarball contains several copies of a binary "xml-reader",
md5sum d1c995b3108329099b1976592979785c, which does not appear to come
with source code. This is a violation of the DFSG, and probably
not legally distributable either (since the package is under the GPL).

The upstream tarball also contains:
- - config.guess, config.sub, COPYING and ltmain.sh as symlinks instead of
  plain files
- - an assortment of files that should be generated at build time:
  config.h, config.log, config.status, libgtkol-1.4.pc, Makefile, stamp-h1

It appears that the upstream has just run "make clean" on a build tree
and tarred up the result, rather than using "make dist" or (better) "make
distcheck".

Rather than just stripping the xml-reader binaries from the tarball, it
would probably be a good idea to make the replacement tarball using
"make dist" or "make distcheck", to make it easier (probably, trivial) to
fix #442637 (which is the reason I was looking at this package in the first
place).

Regards,
    Simon

- -- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable'), (101, 
'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.24-1-686 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
-----BEGIN PGP SIGNATURE-----

iD8DBQFH+R07WSc8zVUw7HYRAk1iAJ4u5ei6DTlbz2g+hj1pSBHufkJVEgCg5dsI
o3Ur19bMRD2iJp9w1QZapmg=
=G3xK
-----END PGP SIGNATURE-----



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to