Your message dated Fri, 18 Sep 2026 14:36:09 +0000
with message-id <[email protected]>
and subject line Bug#1147126: fixed in weakforced 3.2.0+ds-1
has caused the Debian Bug report #1147126,
regarding weakforced: source tarball contains binary blob and debian/copyright
has gaps
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1147126: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1147126
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: weakforced
Version: 3.2.0-1
Severity: serious
Hi,
I've been reviewing weakforced 3.2.0-1 in NEW and found several DFSG issues.
Most of these are pre-existing (present in 3.0.0-5), but they should be
addressed before the package is accepted.
1. Binary blob in source tree
`wforce/foo` is a Mach-O 64-bit arm64 executable sitting in the source tree.
It's not referenced in any `debian/*.install` file, so it won't be packaged,
but its presence in the `orig.tar.gz` is a DFSG problem. Binary blobs without
source or licensing information cannot be distributed. This needs to be removed
from the upstream tarball or excluded via `Files-Excluded` in
`debian/copyright`.
2. Undocumented third-party code in `common/sodcrypto.cc`
This file contains Base64Encode code with copyright "Copyright 2001-2002 Randy
Charles Morin" (kbcafe.com). This author and the corresponding license terms
are missing from `debian/copyright`. The file currently falls under `Files: *`
(GPL-3), but the Base64 code may have different licensing that needs to be
documented separately.
3. Misleading copyright symbol for `ext/ext/murmur3.*`
`debian/copyright` lists "© Austin Appleby" but the source files explicitly
state "The author hereby disclaims copyright to this source code." The
copyright symbol implies an assertion of copyright, which contradicts the
public domain disclaimer. Consider changing to "Austin Appleby" without the ©
symbol, or rewording to clarify the public domain dedication.
Thanks for your work on this package.
--- End Message ---
--- Begin Message ---
Source: weakforced
Source-Version: 3.2.0+ds-1
Done: Pierre-Elliott Bécue <[email protected]>
We believe that the bug you reported is fixed in the latest version of
weakforced, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Pierre-Elliott Bécue <[email protected]> (supplier of updated weakforced package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 18 Sep 2026 16:03:11 +0200
Source: weakforced
Architecture: source
Version: 3.2.0+ds-1
Distribution: unstable
Urgency: medium
Maintainer: Pierre-Elliott Bécue <[email protected]>
Changed-By: Pierre-Elliott Bécue <[email protected]>
Closes: 1147126
Changes:
weakforced (3.2.0+ds-1) unstable; urgency=medium
.
* Repacking upstream release 3.2.0+ds to drop wforce/foo
* d/copyright: Fixing some bogus info
- Closes: #1147126
* d/rules: add a fail-missing rule
Checksums-Sha1:
b03bb56f43469b84bbecb9af22f37c79a4579d6d 2467 weakforced_3.2.0+ds-1.dsc
efe4959c93a93a0e90762217a0665c6963dbb893 298716 weakforced_3.2.0+ds.orig.tar.xz
b19d0bb2ea5d676b2ca31c103c72cd474bc25101 48980
weakforced_3.2.0+ds-1.debian.tar.xz
9cf64f26f3d525ce342609a2ca60eff0fb32a35c 17441
weakforced_3.2.0+ds-1_amd64.buildinfo
Checksums-Sha256:
85a6c7b195f22ace25035cdf73c38fb912ceb19c412db6fc3922095eb195214b 2467
weakforced_3.2.0+ds-1.dsc
1b388251c2f42ec3eae6e19eab5b1a1d911474f48e8f35c623d4f43987c914ff 298716
weakforced_3.2.0+ds.orig.tar.xz
cda26edb48dd087651711623291a345ba718e0975d5d56c28f40027bc80a592f 48980
weakforced_3.2.0+ds-1.debian.tar.xz
fc159902290294d8816a47e9dcc5761e9193da64e4eea584d9f9d28e0661fdba 17441
weakforced_3.2.0+ds-1_amd64.buildinfo
Files:
530e4d60ad513a44d51ed8342d37abc3 2467 web optional weakforced_3.2.0+ds-1.dsc
a523dacfe0e6de66928e66b6687e465c 298716 web optional
weakforced_3.2.0+ds.orig.tar.xz
07fd68c461dd79e32ea326d978d6808f 48980 web optional
weakforced_3.2.0+ds-1.debian.tar.xz
c666640193e430292675cf913a09ba06 17441 web optional
weakforced_3.2.0+ds-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=oRr2
-----END PGP SIGNATURE-----
pgpWKbHwPeqXP.pgp
Description: PGP signature
--- End Message ---
