Your message dated Fri, 01 Apr 2016 08:22:18 +0000
with message-id <e1aluls-00010b...@franck.debian.org>
and subject line Bug#814589: fixed in otrs2 5.0.8+dfsg1-1
has caused the Debian Bug report #814589,
regarding otrs2: source-less files; undocumented copyrights/licenses; abuse of
lintian-overrides; systematic DFSG violations
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
814589: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=814589
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: otrs2
Version: 5.0.6-1
Severity: serious
I'm quite shocked to find how badly otrs2 packaging violates DFSG.
There are many non-distributrable pre-built (minified) source-less files in
orig tarball under "var/httpd/htdocs/js/thirdparty". No attemps to fix this
situation has been and some inconvenient lintian warnings (such as "source-
contains-prebuilt-javascript-object" and "source-contains-prebuilt-flash-
object") are hidden through use of lintian-overrides. Moreover many bundled
third party components are not even documented in "debian/copyright". :( :(
Fixing those problems is neigher optional nor hard. To comply with policy
sources of minified files can be shipped in "debian/missing-sources".
Minified files can be replaced on build time with their uncompressed original
files or even with files minified by build srcipts (if you believe in
minification). Where appropriate you can certainly use system libjs-*
packages and there is already bug for that: #695664.
At your convenience you can use "dh_linktree" or "dh_link" helpers to
facilitate replacement.
New `uscan` functionality allows to do DFSG-repackaging by utilising
"copyright/Files-Excluded" field -- you can read more about that in
https://wiki.debian.org/UscanEnhancements
(Also it might be helpful to add "repacksuffix=+dfsg" to "debian/watch").
Finally you don't have to document copyrights and licenses for files that
were dropped from orig.tar.
You are not the only maintainer who have to deal with pesky bundled non-DFSG
third party components. Just recently yours truly had to fix package
"ckeditor" because one of my packages bundles it. Therefore I'm confident
that you can replace "ckeditor" bundled to "otrs2" with "ckeditor (>=
4.5.6~)" right now and that it is safe to do so.
Please address all those problems ASAP.
--
Cheers,
Dmitry Smirnov
GPG key : 4096R/53968D1B
---
Democracy is a pathetic belief in the collective wisdom of individual
ignorance.
-- H. L. Mencken
signature.asc
Description: This is a digitally signed message part.
--- End Message ---
--- Begin Message ---
Source: otrs2
Source-Version: 5.0.8+dfsg1-1
We believe that the bug you reported is fixed in the latest version of
otrs2, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 814...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Patrick Matthäi <pmatth...@debian.org> (supplier of updated otrs2 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 01 Apr 2016 09:42:04 +0200
Source: otrs2
Binary: otrs2 otrs
Architecture: source all
Version: 5.0.8+dfsg1-1
Distribution: unstable
Urgency: low
Maintainer: Patrick Matthäi <pmatth...@debian.org>
Changed-By: Patrick Matthäi <pmatth...@debian.org>
Description:
otrs - Open Ticket Request System (OTRS 5)
otrs2 - Open Ticket Request System
Closes: 814589
Changes:
otrs2 (5.0.8+dfsg1-1) unstable; urgency=low
.
* Merge 5.0.8-1~bpo8+1 changelog.
* Create a dfsg1 release without ckeditor and use the system version of it.
I cross the fingers that it will work like a charm and remove this again,
if it broke again in the future.
Closes: #814589
Checksums-Sha1:
a54e05d337782b9698ffe6e1fc13522158d353d0 1813 otrs2_5.0.8+dfsg1-1.dsc
1b2a41b3daa243c84dda60ffd3d921d3febdd1e3 17166367
otrs2_5.0.8+dfsg1.orig.tar.bz2
1e25a02967ff47b411ef161fd0df90d41b45928b 44432
otrs2_5.0.8+dfsg1-1.debian.tar.xz
2ed3825735fc0381b9a043704610a37af4e21359 5711578 otrs2_5.0.8+dfsg1-1_all.deb
b251e81187688763c2a4fa9566a16d3a1f61a054 201708 otrs_5.0.8+dfsg1-1_all.deb
Checksums-Sha256:
0955db67347884869cc413df6cb2c7b144da4cfa4bf91c3c8b7905a448cede7b 1813
otrs2_5.0.8+dfsg1-1.dsc
a88f5f2c85ced317972761acb9ceb59cc26faa4c936b93e82509c7d13fe6b639 17166367
otrs2_5.0.8+dfsg1.orig.tar.bz2
b22068c3dc1c76a48e5e91398146bfd8d37dfbe0b35ec8272f655f410d3aae0e 44432
otrs2_5.0.8+dfsg1-1.debian.tar.xz
362b43895ca45da7db818cb9f440fe33e8932e1f969b698406c871b831f5434e 5711578
otrs2_5.0.8+dfsg1-1_all.deb
7836608e01ae244fb96b1d10d4dce0f65a6d1d9a71a6d2da001bb1e445538692 201708
otrs_5.0.8+dfsg1-1_all.deb
Files:
e0bf917b5b3d3a618f600d0bee0b0306 1813 web optional otrs2_5.0.8+dfsg1-1.dsc
cf36fcfa6a1020c25c7a70e3a9cf4d6a 17166367 web optional
otrs2_5.0.8+dfsg1.orig.tar.bz2
c0bc2e83f68ec0e7e62f704935a54372 44432 web optional
otrs2_5.0.8+dfsg1-1.debian.tar.xz
79a0b6c955588999136d6b30285a00e4 5711578 web optional
otrs2_5.0.8+dfsg1-1_all.deb
a3b65fd173e797615f44b9e94bdbc0b8 201708 web optional otrs_5.0.8+dfsg1-1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=hOg0
-----END PGP SIGNATURE-----
--- End Message ---
