Your message dated Fri, 16 Mar 2012 21:04:36 +0000
with message-id <[email protected]>
and subject line Bug#664196: fixed in libyaml-libyaml-perl 0.38-3
has caused the Debian Bug report #664196,
regarding libyaml-libyaml-perl: embeds libyaml without a copyright notice
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
664196: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=664196
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libyaml-libyaml-perl
Version: 0.38-2
Severity: serious
I just noticed that this package embeds libyaml sources with no mention
in either the upstream source or debian/copyright.
While the upstream source doesn't contain any copyright statements,
the LICENSE file in libyaml-perl states it's Copyright (c) 2006 Kirill
Simonov and licensed under a MIT/Expat license, which both we and
libyaml-libyaml-perl upstream are breaching by failing to include the
copyright notice. So setting the severity to 'serious'.
After adding the license notices, we should document the situation as
per <http://wiki.debian.org/EmbeddedCodeCopies>, and look at fixing
it by linking against the shared library in the libyaml-0-2 package,
(Obviously this part isn't release critical.)
Comparing with the upstream/0.1.2 tag of git://andersk.mit.edu/libyaml.git:
734b5e9c71578e42d05de068308b7094 libyaml/src/api.c
734b5e9c71578e42d05de068308b7094 libyaml-libyaml-perl/LibYAML/api.c
fc3b40e7be71bf6c15fc119275f1c13d libyaml/src/dumper.c
fc3b40e7be71bf6c15fc119275f1c13d libyaml-libyaml-perl/LibYAML/dumper.c
6b3d8e337eb5a374d309acd4c7f68995 libyaml/src/emitter.c
b153431e71b1604c3f7826d67466f4bc libyaml-libyaml-perl/LibYAML/emitter.c
5461010b70dd5432b3ae500c42f4d454 libyaml/src/loader.c
5461010b70dd5432b3ae500c42f4d454 libyaml-libyaml-perl/LibYAML/loader.c
9b42a21d4c1d9f1770a8c3f0672a1c22 libyaml/src/parser.c
9b42a21d4c1d9f1770a8c3f0672a1c22 libyaml-libyaml-perl/LibYAML/parser.c
a6be5ad730bafc60fbfbe181ef9ff8f5 libyaml/src/reader.c
a6be5ad730bafc60fbfbe181ef9ff8f5 libyaml-libyaml-perl/LibYAML/reader.c
85c36febec50ecb05d01908f31906b77 libyaml/src/scanner.c
1f79ae045bab848b43269d7655b6f363 libyaml-libyaml-perl/LibYAML/scanner.c
dcbc8a33c493ea9c8ad62c7446440848 libyaml/src/writer.c
dcbc8a33c493ea9c8ad62c7446440848 libyaml-libyaml-perl/LibYAML/writer.c
58411f505216a049b8f9cff6aa8226e0 libyaml/src/yaml_private.h
58411f505216a049b8f9cff6aa8226e0 libyaml-libyaml-perl/LibYAML/yaml_private.h
--
Niko Tyni [email protected]
--- End Message ---
--- Begin Message ---
Source: libyaml-libyaml-perl
Source-Version: 0.38-3
We believe that the bug you reported is fixed in the latest version of
libyaml-libyaml-perl, which is due to be installed in the Debian FTP archive:
libyaml-libyaml-perl_0.38-3.debian.tar.gz
to main/liby/libyaml-libyaml-perl/libyaml-libyaml-perl_0.38-3.debian.tar.gz
libyaml-libyaml-perl_0.38-3.dsc
to main/liby/libyaml-libyaml-perl/libyaml-libyaml-perl_0.38-3.dsc
libyaml-libyaml-perl_0.38-3_amd64.deb
to main/liby/libyaml-libyaml-perl/libyaml-libyaml-perl_0.38-3_amd64.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
gregor herrmann <[email protected]> (supplier of updated libyaml-libyaml-perl
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 16 Mar 2012 21:49:42 +0100
Source: libyaml-libyaml-perl
Binary: libyaml-libyaml-perl
Architecture: source amd64
Version: 0.38-3
Distribution: unstable
Urgency: low
Maintainer: Debian Perl Group <[email protected]>
Changed-By: gregor herrmann <[email protected]>
Description:
libyaml-libyaml-perl - Perl interface to libyaml, a YAML implementation
Closes: 664196
Changes:
libyaml-libyaml-perl (0.38-3) unstable; urgency=low
.
* Document copyright and license for embedded libyaml. Thanks to Niko
Tyni for spotting. (Closes: #664196)
* Bump debhelper build dependency to 9.20120312 to get all hardening
flags.
* Fix a grammatical error in the long description.
Checksums-Sha1:
1e27d332281e79f0989479406483c7a8e3ed4f3b 2193 libyaml-libyaml-perl_0.38-3.dsc
7780bac308814bded0f1a3fdf32d885cc09ebec9 3891
libyaml-libyaml-perl_0.38-3.debian.tar.gz
0bfb5fbd43a4ec636144fa6e6cc05fd76b3618c4 79126
libyaml-libyaml-perl_0.38-3_amd64.deb
Checksums-Sha256:
539f4dddb889c7923cb307c6d39269b1065533482623f1d1deb4366e697dcd73 2193
libyaml-libyaml-perl_0.38-3.dsc
b0f1e1c880315bec6fbfbedbc46a7b6e96c83ec4a525c479f02bbc5447e286b0 3891
libyaml-libyaml-perl_0.38-3.debian.tar.gz
1921b152d5bb82a79df642b167416a8ce468ef50a4b89c7811408e91a64603c1 79126
libyaml-libyaml-perl_0.38-3_amd64.deb
Files:
870a6c4c27d94b737daa356e2340ca1b 2193 perl optional
libyaml-libyaml-perl_0.38-3.dsc
6feb6f59d63331d691a9f7eb25f292b6 3891 perl optional
libyaml-libyaml-perl_0.38-3.debian.tar.gz
993a7cc016a19aee8e7472ef1d004a9e 79126 perl optional
libyaml-libyaml-perl_0.38-3_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)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=qf3c
-----END PGP SIGNATURE-----
--- End Message ---
