Package: sponsorship-requests Severity: normal Control: block 890119 by -1 Control: tag 890119 + pending Control: tag -1 + security
Hi, I'm looking for a sponsor for this NMU against youtube-dl. It removes youtube-dl's built-in autoupdate mechanism, whose security is unclear and which is defunct on Debian anyhow (see #890119 for details). @Rogério: This exactly adds the patch I sent to the packaging repository in https://github.com/rbrito/pkg-youtube-dl/pull/2 However, since the state of the packaging repository is inconsistent with what is in the Debian archive, you will need to push to the repository, merge my PR, and then manually grab the updated changelog. The updated version of the package is available on mentors.d.n : https://mentors.debian.net/package/youtube-dl https://mentors.debian.net/debian/pool/main/y/youtube-dl/youtube-dl_2018.01.27-1.1.dsc Note that there are 2 minor issues in the package that I did not change: - The package still uses dh 10 I have no idea whether the maintainer wants to switch to dh 11 - groff throws a warning on the youtube-dl(1) manpage (lintian tag manpage-has-errors-from-man), but I believe this is out of scope for this NMU. Best, nicoo -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (900, 'testing'), (500, 'unstable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.14.0-3-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled
signature.asc
Description: PGP signature