Your message dated Thu, 13 Aug 2015 07:04:36 +0000
with message-id <e1zpmz2-0007as...@franck.debian.org>
and subject line Bug#795057: fixed in python-xlib 0.14+20091101-3
has caused the Debian Bug report #795057,
regarding python-xlib:  Embedded code copy with missing copyright
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
795057: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=795057
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: python-xlib
Version: 0.14+20091101-2
Severity: serious
Justification: Policy 4.5
User: reproducible-bui...@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org

Hi,

Your packages contains an embedded code copy of texi2html which is
copyright Lionel Cons and others and is licensed under the GPL and
Creative Commons Attribution-ShareAlike license. This information is
missing from debian/copyright of python-xlib and is thus a violation of
policy §4.5.

I found this bug while working on the reproducible builds project [1] to
make texi2html produce reproducible output.

From that point of view there are two options:

 1. remove the embedded code copy [2] and build-depend on texi2html
    (this would also make policy §4.13 happy). I would prefer this
    solution and would supply you with a patch if you want.             
    The package would not become immediately reproducible with this
    solution though because it does not use dh in debian/rules but
    instead classic debhelper. Because of that $SOURCE_DATE_EPOCH has
    to be exported in debian/rules [3]

 2. keep the embedded code copy and amend your debian/copyright. In this
    case I would open another bug so that your embedded copy of
    texi2html is patched to produce reproducible output.


Kind regards,
akira

[1] https://wiki.debian.org/ReproducibleBuilds/About
[2] https://wiki.debian.org/EmbeddedCodeCopies
[3] https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal

Attachment: signature.asc
Description: OpenPGP digital signature


--- End Message ---
--- Begin Message ---
Source: python-xlib
Source-Version: 0.14+20091101-3

We believe that the bug you reported is fixed in the latest version of
python-xlib, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 795...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andrew Shadura <andre...@debian.org> (supplier of updated python-xlib package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Thu, 13 Aug 2015 08:14:19 +0200
Source: python-xlib
Binary: python-xlib python3-xlib
Architecture: source all
Version: 0.14+20091101-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Python Modules Team 
<python-modules-t...@lists.alioth.debian.org>
Changed-By: Andrew Shadura <andre...@debian.org>
Description:
 python-xlib - interface for Python to the X11 protocol
 python3-xlib - interface for Python 3 to the X11 protocol
Closes: 565996 795057
Changes:
 python-xlib (0.14+20091101-3) unstable; urgency=medium
 .
   [ Ramkumar Ramachandra ]
   * Remove useless debugging output (Closes: #565996)
 .
   [ Andrew Shadura ]
   * Switch to 3.0 (quilt) format.
   * Rename patches.
   * Use debhelper 9 in its short form.
   * Use pybuild.
   * Bump Standards-Version.
   * Don't build or install PostScript documentation and info files.
   * Use system-provided texi2html instead of a shipped version
     (Closes: #795057).
   * Update debian/copyright (Closes: #795057).
   * Don't install Makefile or texi2html with the documentation.
   * Set executable bit for examples.
Checksums-Sha1:
 10b435453ca49959fe8b23257ae605c76038fe07 2183 python-xlib_0.14+20091101-3.dsc
 3d18c5a9507ecf6cd206a7cf01689a57b36551d6 54480 
python-xlib_0.14+20091101-3.debian.tar.xz
 df555dea19fc439b36a66bc1f2e004ad304e8553 101818 
python-xlib_0.14+20091101-3_all.deb
 9ff4f55b16e4b108d001087d30a0c6068a4bf9ff 101782 
python3-xlib_0.14+20091101-3_all.deb
Checksums-Sha256:
 ec7bcc736ff9065fc5ea0d9c79da12709e21c261021c8588288963acef260299 2183 
python-xlib_0.14+20091101-3.dsc
 61ee2e0b3447d9dcd51cf82f7cd980efedb6de287d0ffb5a823ced9c4721e589 54480 
python-xlib_0.14+20091101-3.debian.tar.xz
 d744f54863cf6cc69cf11c32629cfe52ceeef3f66aa7dd8274a04b00fc3476ce 101818 
python-xlib_0.14+20091101-3_all.deb
 8720b6701abc543e4e5fd0225e7544d6e4af290fb13adafb86bdf3fb0bb1e148 101782 
python3-xlib_0.14+20091101-3_all.deb
Files:
 5739b88b8fcc489fcd90ff31f0760565 2183 python optional 
python-xlib_0.14+20091101-3.dsc
 db187a5961310f1c2c306c2aee8ebf40 54480 python optional 
python-xlib_0.14+20091101-3.debian.tar.xz
 5d3709bb5f19a6ddc2971cfbc576a254 101818 python optional 
python-xlib_0.14+20091101-3_all.deb
 9bf74d075ee4cfddc3e897e74a4e69d4 101782 python optional 
python3-xlib_0.14+20091101-3_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=mBWx
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to