Your message dated Thu, 13 Aug 2015 07:04:36 +0000 with message-id <e1zpmz2-0007as...@franck.debian.org> and subject line Bug#795057: fixed in python-xlib 0.14+20091101-3 has caused the Debian Bug report #795057, regarding python-xlib: Embedded code copy with missing copyright to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 795057: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=795057 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Source: python-xlib Version: 0.14+20091101-2 Severity: serious Justification: Policy 4.5 User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi, Your packages contains an embedded code copy of texi2html which is copyright Lionel Cons and others and is licensed under the GPL and Creative Commons Attribution-ShareAlike license. This information is missing from debian/copyright of python-xlib and is thus a violation of policy §4.5. I found this bug while working on the reproducible builds project [1] to make texi2html produce reproducible output. From that point of view there are two options: 1. remove the embedded code copy [2] and build-depend on texi2html (this would also make policy §4.13 happy). I would prefer this solution and would supply you with a patch if you want. The package would not become immediately reproducible with this solution though because it does not use dh in debian/rules but instead classic debhelper. Because of that $SOURCE_DATE_EPOCH has to be exported in debian/rules [3] 2. keep the embedded code copy and amend your debian/copyright. In this case I would open another bug so that your embedded copy of texi2html is patched to produce reproducible output. Kind regards, akira [1] https://wiki.debian.org/ReproducibleBuilds/About [2] https://wiki.debian.org/EmbeddedCodeCopies [3] https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal
signature.asc
Description: OpenPGP digital signature
--- End Message ---
--- Begin Message ---Source: python-xlib Source-Version: 0.14+20091101-3 We believe that the bug you reported is fixed in the latest version of python-xlib, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 795...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Andrew Shadura <andre...@debian.org> (supplier of updated python-xlib package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 13 Aug 2015 08:14:19 +0200 Source: python-xlib Binary: python-xlib python3-xlib Architecture: source all Version: 0.14+20091101-3 Distribution: unstable Urgency: medium Maintainer: Debian Python Modules Team <python-modules-t...@lists.alioth.debian.org> Changed-By: Andrew Shadura <andre...@debian.org> Description: python-xlib - interface for Python to the X11 protocol python3-xlib - interface for Python 3 to the X11 protocol Closes: 565996 795057 Changes: python-xlib (0.14+20091101-3) unstable; urgency=medium . [ Ramkumar Ramachandra ] * Remove useless debugging output (Closes: #565996) . [ Andrew Shadura ] * Switch to 3.0 (quilt) format. * Rename patches. * Use debhelper 9 in its short form. * Use pybuild. * Bump Standards-Version. * Don't build or install PostScript documentation and info files. * Use system-provided texi2html instead of a shipped version (Closes: #795057). * Update debian/copyright (Closes: #795057). * Don't install Makefile or texi2html with the documentation. * Set executable bit for examples. Checksums-Sha1: 10b435453ca49959fe8b23257ae605c76038fe07 2183 python-xlib_0.14+20091101-3.dsc 3d18c5a9507ecf6cd206a7cf01689a57b36551d6 54480 python-xlib_0.14+20091101-3.debian.tar.xz df555dea19fc439b36a66bc1f2e004ad304e8553 101818 python-xlib_0.14+20091101-3_all.deb 9ff4f55b16e4b108d001087d30a0c6068a4bf9ff 101782 python3-xlib_0.14+20091101-3_all.deb Checksums-Sha256: ec7bcc736ff9065fc5ea0d9c79da12709e21c261021c8588288963acef260299 2183 python-xlib_0.14+20091101-3.dsc 61ee2e0b3447d9dcd51cf82f7cd980efedb6de287d0ffb5a823ced9c4721e589 54480 python-xlib_0.14+20091101-3.debian.tar.xz d744f54863cf6cc69cf11c32629cfe52ceeef3f66aa7dd8274a04b00fc3476ce 101818 python-xlib_0.14+20091101-3_all.deb 8720b6701abc543e4e5fd0225e7544d6e4af290fb13adafb86bdf3fb0bb1e148 101782 python3-xlib_0.14+20091101-3_all.deb Files: 5739b88b8fcc489fcd90ff31f0760565 2183 python optional python-xlib_0.14+20091101-3.dsc db187a5961310f1c2c306c2aee8ebf40 54480 python optional python-xlib_0.14+20091101-3.debian.tar.xz 5d3709bb5f19a6ddc2971cfbc576a254 101818 python optional python-xlib_0.14+20091101-3_all.deb 9bf74d075ee4cfddc3e897e74a4e69d4 101782 python optional python3-xlib_0.14+20091101-3_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJVzD49AAoJEG6k0jEaLSaNIfUQAKWu+rjmMZ4X/Rm9zIOewXZh S00qrE8N1EB5nADOMXrUidezL7XcIvxYg8neRBPBtq7dLtna7+c9jSsLemLRnEb1 Ftr2UpPSDlA9YlDPeqh9iA5FcjmtPvmxzpV5drDI8Xnv+3a2Wxx3q2u2ZxoNlMwE 3eyY/ZkcwAvhv8YVKAIqHAgqcg79tX3mrAgYd3OgHTUCb9v7GeppvbMD/DK5VhoF zAi3M1M/8ybdhV9jXkWBM5qtmRuK9YorIsXPUmlrqQlDqfK3DANtJrxHELpwsr8E OtODXk/uwu7E04tzs/Nkk5IJjYP4rAHZEkan2OeTJfku5DMdaOFqDjiZyfSeUElz S9zeTOsfimaeKRF/6lfRTWd9WHRaDoiPFhyUcwLqYxs9bKJ4T/x66jj7BhWgPZCg UMnpO2ZM/+Shw6TN7sqW9CTVpzUmPsGW6osr9/Yz6iFGYziPbe3UWnn2biwDpXOz RQPIo4N4hQe1r1VXUlszlldeE9kf705KcZjco808ro19kk7MvU0B4GV8uGCcu1Ig PFIMlmrqyhRBNQPK0m/U9jUE/hLi4zRq00yiW0nJhJqFwe0GkzINLT2vb8L/qNi6 MXtlEMIREsg1Ieege6DGo5B6ityBI6uJlpjpNSqQ36HKGYI3jRUBPh1FU2S0Ildx JA0bRPVQGIFDJJJTkZCJ =mBWx -----END PGP SIGNATURE-----
--- End Message ---