Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1220824 > unrolled thread

Bug#1087816: lsdvd: misrepresents location of upstream source

Back to article view | Back to linux.debian.bugs.dist

Contents

  Bug#1087816: lsdvd: misrepresents location of upstream source наб <nabijaczleweli@nabijaczleweli.xyz> - 2024-11-19 04:20 +0100
    Bug#1087816: lsdvd: misrepresents location of upstream source наб <nabijaczleweli@nabijaczleweli.xyz> - 2024-12-08 14:20 +0100

#1220824 — Bug#1087816: lsdvd: misrepresents location of upstream source

[Multipart message — attachments visible in raw view] — view raw

Source: lsdvd
Version: 0.17-1
Severity: serious
Justification: policy 12.5

Dear Maintainer,

d/changelog says
  lsdvd (0.17-1) unstable; urgency=low
    * New upstream release, from new upstream and update copyright accordingly.
but d/copyright still says
  It was downloaded from http://sourceforge.net/projects/acidrip/
whereas lsdvd 0.17 actually came from
  https://qa.debian.org/watch/sf.php/lsdvd

Thus, the package is in violation of 
  12.5. Copyright information
    In addition, the copyright file must say where the upstream sources
    (if any) were obtained, 

Best,

-- System Information:
Debian Release: 12.8
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable-debug'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.1.0-12-amd64 (SMP w/24 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_FIRMWARE_WORKAROUND, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

[toc] | [next] | [standalone]

#1223214

[Multipart message — attachments visible in raw view] — view raw

Control: severity -1 serious

On Sun, Dec 08, 2024 at 09:15:17AM +0100, Petter Reinholdtsen wrote:
> [наб]
> > d/changelog says
> >   lsdvd (0.17-1) unstable; urgency=low
> >     * New upstream release, from new upstream and update copyright accordingly.
> > but d/copyright still says
> >   It was downloaded from http://sourceforge.net/projects/acidrip/
> > whereas lsdvd 0.17 actually came from
> >   https://qa.debian.org/watch/sf.php/lsdvd
> This seem to be based on a misunderstanding.  The sf.php script is a
> shim script making it easier to track new sourceforge.net releases in
> d/watch files.  The 'sf' in sf.php stands for sourceforge.
We both understand this perfectly well, then.

> Why do you
> believe these two locations do not represent the same source?
Because one of them says lsdvd and has lsdvd 0.17
but the other one says acidrip and doesn't.

Thus, the one that says acidrip can't possibly fulfil policy 12.5.

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.bugs.dist

csiph-web