#1087816 lsdvd: misrepresents location of upstream source

Package:
src:lsdvd
Source:
src:lsdvd
Submitter:
наб
Date:
2024-12-10 06:24:02 UTC
Severity:
normal
#1087816#5
Date:
2024-11-19 03:12:15 UTC
From:
To:
Dear Maintainer,

d/changelog says
  lsdvd (0.17-1) unstable; urgency=low
    * New upstream release, from new upstream and update copyright accordingly.
but d/copyright still says
  It was downloaded from http://sourceforge.net/projects/acidrip/
whereas lsdvd 0.17 actually came from
https://qa.debian.org/watch/sf.php/lsdvd

Thus, the package is in violation of
  12.5. Copyright information
    In addition, the copyright file must say where the upstream sources
    (if any) were obtained,

Best,
#1087816#10
Date:
2024-12-08 08:15:17 UTC
From:
To:
[наб]

This seem to be based on a misunderstanding.  The sf.php script is a
shim script making it easier to track new sourceforge.net releases in
d/watch files.  The 'sf' in sf.php stands for sourceforge.  Why do you
believe these two locations do not represent the same source?
#1087816#17
Date:
2024-12-08 13:08:38 UTC
From:
To:
Control: severity -1 serious
We both understand this perfectly well, then.
Because one of them says lsdvd and has lsdvd 0.17
but the other one says acidrip and doesn't.

Thus, the one that says acidrip can't possibly fulfil policy 12.5.
#1087816#24
Date:
2024-12-08 21:27:32 UTC
From:
To:
[наб]

Ah, I was blind.  I only noticed the structure, not the details, of
those URLs.  I do not know if acidrip might distribute lsdvd or not, but
the lsdvd URL is a much better source.

Do not really know if this is true myself, and do not believe such
simple and most likely cut-n-paste typo in d/copyright is enough to ask
for the removal of lsdvd.  In any case, I hope the lsdvd maintainer got
time to look at this issue soon, to render the question moot.

In other news, I am working on preparing lsdvd 0.18, and hope to have it
stamped soon.  Will most likely not be able to release tarballs,
unfortunately, only tag the git repo. :)
#1087816#29
Date:
2024-12-08 21:45:13 UTC
From:
To:
The #1087839 ITS pops before autoremoval
and it looks like this is fixed already:
https://salsa.debian.org/multimedia-team/lsdvd/-/blob/master/debian/copyright
That's a little suboptimal,
given that the watch file will be looking at the tarball listing:
https://salsa.debian.org/multimedia-team/lsdvd/-/blob/master/debian/watch

If the upstream release model becomes git tags,
that'll be good to know and update for d/watch before the ITS.

Best,
#1087816#34
Date:
2024-12-10 06:20:42 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
lsdvd, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1087816@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andreas Tille <tille@debian.org> (supplier of updated lsdvd package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Tue, 10 Dec 2024 06:53:31 +0100
Source: lsdvd
Architecture: source
Version: 0.17-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Multimedia Maintainers <debian-multimedia@lists.debian.org>
Changed-By: Andreas Tille <tille@debian.org>
Closes: 1087816
Changes:
 lsdvd (0.17-2) unstable; urgency=medium
 .
   * Team upload.
   * Maintain package in Debian Multimedia team
   * Add README.Debian to inform about removal past Trixie
   * Add watch file
   * d/copyright:
      - Fix download location (Closes: #1087816)
      - DEP5
   * Standards-Version: 4.7.0 (routine-update)
   * debhelper-compat 13 (routine-update)
   * Rules-Requires-Root: no (routine-update)
   * Trim trailing whitespace.
   * Propagate hardening options
Checksums-Sha1:
 c0854dc9967bb11e8faee2f8e104333fdfa6fd20 1928 lsdvd_0.17-2.dsc
 93ead91a7aa012ed5184627af432efaef2a24ce9 3116 lsdvd_0.17-2.debian.tar.xz
 421606437c7dc1c6935607b8a972c2e997d0555a 6263 lsdvd_0.17-2_amd64.buildinfo
Checksums-Sha256:
 d52ceafc76ad6e60e3e24c372d98d5d2776162037964b57957c48d69c7402046 1928 lsdvd_0.17-2.dsc
 cd9a55bafd94747534c56731d025d75bb656eeaa80c4059ed9944c26288c5d07 3116 lsdvd_0.17-2.debian.tar.xz
 ffc75a02e705b4b7b7fc5a0c2382fab01f58b7fb1ddc11b7e380f8b797118812 6263 lsdvd_0.17-2_amd64.buildinfo
Files:
 31a2875608d02de63fa6dfdc46e55c14 1928 utils optional lsdvd_0.17-2.dsc
 4ff3a1c37590e59c79bf1a27a914fe50 3116 utils optional lsdvd_0.17-2.debian.tar.xz
 0f74d83a4eccfb9199b95536e9a89e19 6263 utils optional lsdvd_0.17-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
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=EBgw
-----END PGP SIGNATURE-----