Your message dated Thu, 03 Oct 2013 07:49:09 +0000
with message-id <e1vrden-00031v...@franck.debian.org>
and subject line Bug#725210: fixed in asterisk 1:11.5.1~dfsg1-1
has caused the Debian Bug report #725210,
regarding embeds multiple libraries, at least two of which undistributable
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
725210: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725210
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: asterisk
Version: 1:11.5.1~dfsg-2
Severity: serious
I was surprised and initially happy to see Asterisk 11 uploaded into
sid. My happiness quickly diminished when I saw that the upload contains
the embedded pjproject as-is, despite this issue having been flagged for
months now and being the sole blocker for an upload since the release of
Asterisk 11 eleven months ago.
There are several policy violations here:
- Contains a convenience copy of pjproject under res/pjproject (§4.13)
- pjproject itself contains convenience copies of several libraries
under res/pjproject/third_party/ some of which already packaged in
Debian (§4.13)
- All of the above are completely undocumented in d/copyright (§12.5)
- Not only they are undocumented, but it looks like no audit has
happened on them whatsoever. From a very cursory look, at least
res/pjproject/third_party/milenage/ & res/pjproject/third_party/g7221/
seem to completely lack license information other than the occasional
"All right reserved", which makes them undistributable by Debian or
anyone else. (§2.3)
I'm baffled on how a DD could ever upload this into the archive, esp.
since these issues were widely known and discussed beforehand. Please
refrain from making such uploads in the future, as it's both a disgrace
to Debian's standards and a legal risk.
Regards,
Faidon
--- End Message ---
--- Begin Message ---
Source: asterisk
Source-Version: 1:11.5.1~dfsg1-1
We believe that the bug you reported is fixed in the latest version of
asterisk, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 725...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Jeremy Lainé <jeremy.la...@m4x.org> (supplier of updated asterisk package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Thu, 03 Oct 2013 09:25:06 +0200
Source: asterisk
Binary: asterisk asterisk-modules asterisk-dahdi asterisk-voicemail
asterisk-voicemail-imapstorage asterisk-voicemail-odbcstorage asterisk-ooh323
asterisk-mp3 asterisk-mysql asterisk-mobile asterisk-doc asterisk-dev
asterisk-dbg asterisk-config
Architecture: source amd64 all
Version: 1:11.5.1~dfsg1-1
Distribution: unstable
Urgency: low
Maintainer: Debian VoIP Team <pkg-voip-maintain...@lists.alioth.debian.org>
Changed-By: Jeremy Lainé <jeremy.la...@m4x.org>
Description:
asterisk - Open Source Private Branch Exchange (PBX)
asterisk-config - Configuration files for Asterisk
asterisk-dahdi - DAHDI devices support for the Asterisk PBX
asterisk-dbg - Debugging symbols for Asterisk
asterisk-dev - Development files for Asterisk
asterisk-doc - Source code documentation for Asterisk
asterisk-mobile - Bluetooth phone support for the Asterisk PBX
asterisk-modules - loadable modules for the Asterisk PBX
asterisk-mp3 - MP3 playback support for the Asterisk PBX
asterisk-mysql - MySQL database protocol support for the Asterisk PBX
asterisk-ooh323 - H.323 protocol support for the Asterisk PBX - ooH323c
asterisk-voicemail - simple voicemail support for the Asterisk PBX
asterisk-voicemail-imapstorage - IMAP voicemail storage support for the
Asterisk PBX
asterisk-voicemail-odbcstorage - ODBC voicemail storage support for the
Asterisk PBX
Closes: 725210
Changes:
asterisk (1:11.5.1~dfsg1-1) unstable; urgency=low
.
* Remove res/pjproject from the source tarball (Closes: #725210).
Checksums-Sha1:
4b7af8c8c56c3b5b9e5e34de7f22b6d4e30bae0c 3073 asterisk_11.5.1~dfsg1-1.dsc
97b2b5c3211de94f4679a43e67acc8232437a70c 6919951
asterisk_11.5.1~dfsg1.orig.tar.gz
e486a08c701ef9e112e1abf0e48e978c7b5e613a 113482
asterisk_11.5.1~dfsg1-1.debian.tar.gz
b04b88680c75c50ae97fc25c0cda85d242b184ca 1450512
asterisk_11.5.1~dfsg1-1_amd64.deb
a6ae6b7e6711c4d2fa9488d63be4a5c695c13c31 2012004
asterisk-modules_11.5.1~dfsg1-1_amd64.deb
ee044710d0c2f76745d71f83216e5b2cbecddf99 608296
asterisk-dahdi_11.5.1~dfsg1-1_amd64.deb
0affe379faf39cff0527f2047c5f2346c7271bc7 474860
asterisk-voicemail_11.5.1~dfsg1-1_amd64.deb
abddfcd3e563d2ef3273cbec79a4f3a419c1c2ad 491026
asterisk-voicemail-imapstorage_11.5.1~dfsg1-1_amd64.deb
5ad4724893b59a1f830b6da5db0231ac52e2ecb7 480688
asterisk-voicemail-odbcstorage_11.5.1~dfsg1-1_amd64.deb
e959b6bcf8fef4c3059aad1eb2340d0c853beef5 734238
asterisk-ooh323_11.5.1~dfsg1-1_amd64.deb
5417d599cc80ccbafe0bdc05c3b2a76110a10bb8 417102
asterisk-mp3_11.5.1~dfsg1-1_amd64.deb
7b953842cccc0df4299653e0ff445082b6514fd9 434130
asterisk-mysql_11.5.1~dfsg1-1_amd64.deb
74140ec11badb173b6311df6243daf68dc8db9dd 426946
asterisk-mobile_11.5.1~dfsg1-1_amd64.deb
8e6d1ba3da5c8e31c175f07bebe02127685f2162 1057254
asterisk-doc_11.5.1~dfsg1-1_all.deb
ca6867273461542559d93ef3389a90300548681c 703072
asterisk-dev_11.5.1~dfsg1-1_all.deb
649310a8e238d30cf96c9acc4185a06d19de294c 12385926
asterisk-dbg_11.5.1~dfsg1-1_amd64.deb
b55932989a0e21203aa8becb4442b1990f4b9556 744538
asterisk-config_11.5.1~dfsg1-1_all.deb
Checksums-Sha256:
f6d73a404787386173661dfd62f58afbe7c7550ba5bc34dda815be14271c4e53 3073
asterisk_11.5.1~dfsg1-1.dsc
4d1013a5fc1fe86323cd6f4cf12786ddff4a5b4eebcef6c5e4bec653a6fc2381 6919951
asterisk_11.5.1~dfsg1.orig.tar.gz
34577704ebe3b1ba5213ccaca37e5bb4cc06307cdf8f25aca1c97332aedc3c85 113482
asterisk_11.5.1~dfsg1-1.debian.tar.gz
301d8ebc35c0e794ae9fc2371e4182da47b18aa52241f4ee124d19a32579ac4f 1450512
asterisk_11.5.1~dfsg1-1_amd64.deb
918296404fee207b1e9d900df5230ca0ee2c140e08f7d2466b31711f6ce67f15 2012004
asterisk-modules_11.5.1~dfsg1-1_amd64.deb
e719d01b4bdba3bb507803cbc428d174178833a65229b8b4e78c03b5312f1b93 608296
asterisk-dahdi_11.5.1~dfsg1-1_amd64.deb
2d762bc530df280891b6f1ce566cc7365af6213ee83c2a99e482d026786e2618 474860
asterisk-voicemail_11.5.1~dfsg1-1_amd64.deb
ef1da6ff2b8deef7e394b57af0c81ba93e5ac1ebf4c96567af5a974a9cb5cb8b 491026
asterisk-voicemail-imapstorage_11.5.1~dfsg1-1_amd64.deb
9224629f0401f4e71afe7c57584a0e02d938120cda5160cf9ee6aa59020005f3 480688
asterisk-voicemail-odbcstorage_11.5.1~dfsg1-1_amd64.deb
ca52e06dd555ee2ef30d58be2bc6718e1ee505a8f9e7b83f811938e8c6eccc72 734238
asterisk-ooh323_11.5.1~dfsg1-1_amd64.deb
09b7b92a52f14b085b482ff46ae9c5d13f891685aa676afdaeb0c6ca6de145dc 417102
asterisk-mp3_11.5.1~dfsg1-1_amd64.deb
8c13c20e5b703f6365062c0073efaee1703bb4de6630f2117f7598cccb7e83c0 434130
asterisk-mysql_11.5.1~dfsg1-1_amd64.deb
7e14e2639887b5101f3e55bf327f422742ffc4163592da36c3064b66803fcede 426946
asterisk-mobile_11.5.1~dfsg1-1_amd64.deb
d1adbbbde11fc6fb7b719bed6a8ed95e2ca7688be9647169f48cbca28e678324 1057254
asterisk-doc_11.5.1~dfsg1-1_all.deb
40ea9e1bc8cabf28fddad22ffc75ffcc02ca1af0122a6ef925f3d3c11a22d607 703072
asterisk-dev_11.5.1~dfsg1-1_all.deb
2403ee86d3e83febcfe99a9e4fd4a556da2f81863c4150bcb5becef350fd68e8 12385926
asterisk-dbg_11.5.1~dfsg1-1_amd64.deb
67fdb1b72db3c8b2188b791fae5f423e1bcfc64cdf373d3e4b295ad89ccaf71f 744538
asterisk-config_11.5.1~dfsg1-1_all.deb
Files:
602182b2ac85b54d8f032d3f949e099c 3073 comm optional asterisk_11.5.1~dfsg1-1.dsc
cbb852fabd53a748e26bd3a47885b161 6919951 comm optional
asterisk_11.5.1~dfsg1.orig.tar.gz
88043f4baec5b1a3791550cec0725590 113482 comm optional
asterisk_11.5.1~dfsg1-1.debian.tar.gz
79c8fb2ea184e095111d4483cf4ff8eb 1450512 comm optional
asterisk_11.5.1~dfsg1-1_amd64.deb
3334cc2e09c688a84c2594b7f94b6412 2012004 libs optional
asterisk-modules_11.5.1~dfsg1-1_amd64.deb
91ba9896587ec53bfb0c9782cf3f055d 608296 comm optional
asterisk-dahdi_11.5.1~dfsg1-1_amd64.deb
50d7870a8c8040ded7cd97e6075a1fa1 474860 comm optional
asterisk-voicemail_11.5.1~dfsg1-1_amd64.deb
ddc23665f292f9d15366a1a095d77cb9 491026 comm optional
asterisk-voicemail-imapstorage_11.5.1~dfsg1-1_amd64.deb
907ad5df668f9248ea7a83bab2b19315 480688 comm optional
asterisk-voicemail-odbcstorage_11.5.1~dfsg1-1_amd64.deb
93e39e0ea51def281ce753257a0aa4cd 734238 comm optional
asterisk-ooh323_11.5.1~dfsg1-1_amd64.deb
a79b2d5980effa65bb7829086895b876 417102 comm optional
asterisk-mp3_11.5.1~dfsg1-1_amd64.deb
4de0de55cdf7d57ac20750e619740676 434130 comm optional
asterisk-mysql_11.5.1~dfsg1-1_amd64.deb
8742eddaf0b10d12c25f49ad307b1955 426946 comm optional
asterisk-mobile_11.5.1~dfsg1-1_amd64.deb
b6d6b26e36cd0a86496ff1695be3ebeb 1057254 doc extra
asterisk-doc_11.5.1~dfsg1-1_all.deb
b9c89e8082dd26aab772cde26d21aefd 703072 devel extra
asterisk-dev_11.5.1~dfsg1-1_all.deb
c99618753e3f988cf1f5efe9e19680b0 12385926 debug extra
asterisk-dbg_11.5.1~dfsg1-1_amd64.deb
ce47ffa0818deb9a60b758b20503008a 744538 comm optional
asterisk-config_11.5.1~dfsg1-1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)
iEYEARECAAYFAlJNHfwACgkQ4mJJZqJp2Seu7gCfWwyRddIkhXnWIfO5Cfr85oqq
mlAAn3lFkkOtkTgQHQ2s+VNMIyHhUxan
=ImvV
-----END PGP SIGNATURE-----
--- End Message ---
