Your message dated Sun, 15 Nov 2015 18:33:54 +0000 with message-id <e1zy27e-0000p7...@franck.debian.org> and subject line Bug#789256: fixed in cmus 2.7.1-1 has caused the Debian Bug report #789256, regarding cmus: Pulls in unwanted and potentially dangerous DECnet packages through libroar2 to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 789256: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=789256 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: cmus Version: 2.5.0-7+b1 Severity: serious Justification: potentially breaks other packages Hello! As previously discussed, I am opening a bug report against cmus to drop ROAR support from cmus. The reason is that ROAR still depends on libdnet which is potentially dangerous as it may disrupt a user's network configuration [1] for users who run apt-get with --install-suggests and a consequently, the removal of ROAR audio support was previously requested in Debian [2] as well as Ubuntu [3]. Furthermore, it has been observed, that ROAR with DECnet even directly affects cmus now, rendering the package unusable after installation, being stuck directly after starting cmus: glaubitz@z6:~> cmus getnodeadd: Can not open /etc/decnet.conf I therefore request the removal of ROAR support in cmus completely. If anyone needs this feature, they can just rebuild cmus locally since apparently there aren't any users for ROAR audio besides its original maintainer and his buddy who requested re-adding the feature in [4]. Thanks, Adrian > [1] https://lists.debian.org/debian-user/2011/09/msg00287.html > [2] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=675610 > [3] https://bugs.launchpad.net/ubuntu/+source/cmus/+bug/923027 > [4] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=680745 -- System Information: Debian Release: stretch/sid APT prefers testing APT policy: (500, 'testing'), (99, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.0.0-1-amd64 (SMP w/8 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages cmus depends on: ii libao4 1.1.0-3 ii libasound2 1.0.28-1 ii libc6 2.19-18 ii libcddb2 1.3.2-5 ii libcdio-cdda1 0.83-4.2 ii libcdio13 0.83-4.2 ii libcue1 1.4.0-1 ii libfaad2 2.8.0~cvs20150510-1 ii libflac8 1.3.1-2 ii libmad0 0.15.1b-8 ii libmodplug1 1:0.8.8.4-4.1+b1 ii libmpcdec6 2:0.1~r459-4.1 ii libncursesw5 5.9+20150516-2 ii libtinfo5 5.9+20150516-2 ii libvorbisfile3 1.3.4-2 ii libwavpack1 4.75.0-1 Versions of packages cmus recommends: ii cmus-plugin-ffmpeg 2.5.0-7+b1 ii libpulse0 6.0-2 ii libroar2 1.0~beta11-1 cmus suggests no packages. -- no debconf information
--- End Message ---
--- Begin Message ---Source: cmus Source-Version: 2.7.1-1 We believe that the bug you reported is fixed in the latest version of cmus, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 789...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Sebastian Ramacher <sramac...@debian.org> (supplier of updated cmus package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 15 Nov 2015 19:24:52 +0100 Source: cmus Binary: cmus cmus-plugin-ffmpeg Architecture: source Version: 2.7.1-1 Distribution: unstable Urgency: medium Maintainer: Debian Multimedia Maintainers <pkg-multimedia-maintainers@lists.alioth.debian.org> Changed-By: Sebastian Ramacher <sramac...@debian.org> Description: cmus - lightweight ncurses audio player cmus-plugin-ffmpeg - lightweight ncurses audio player (FFmpeg plugin) Closes: 695072 779335 789256 792134 805109 805169 Changes: cmus (2.7.1-1) unstable; urgency=medium . * Team upload. . [ Alessio Treglia ] * Demote extra plugins to Suggests (Closes: #789256) * Refresh patchset for 2.6.0. . [ Sebastian Ramacher ] * New upstream release. (Closes: #779335, #792134) - Use libswresample instead of libavresample. (Closes: #805169, #805109) * Update path for README * debian/control: - Add libdiscid-dev, libopusfile-dev, libsamplerate0-dev and libjack-dev to Build-Depends. - Change libavresample-dev to libswresample-dev in Build-Depends and add libavcodec-dev. - Add bash-completion to Build-Depends. - Bump Standards-Version to 3.9.6. - Update Vcs-Browser. - Make cmus-plugin-ffmpeg depend on the same version of cmus (Closes: #695072) * debian/cmus.install: Install zsh completion. * debian/cmus.bash-completion: Install bash completion. * debian/rules: - Build with --parallel and --with bash-completion. - Handle jack shlibs similar to pulse. * debian/patches: - libav10.patch: Removed, no longer needed. - 02_link_avcodec.patch: Functions from libavcodec are used so make sure the ffmpeg plugin is linked against libavcodec. Checksums-Sha1: fd86dbc92a73a73fdfc09267fea0dc84efc0f92d 2381 cmus_2.7.1-1.dsc e31000f430054f96a0cf5897caef88741992cd32 296818 cmus_2.7.1.orig.tar.gz d4b7175c0360a846d2e9bccf04e1a1a0bbcad3e5 8780 cmus_2.7.1-1.debian.tar.xz Checksums-Sha256: af185b793d592d7e409671eee1b53c5a6d594af9dbb5796625ecd2ea044d5d39 2381 cmus_2.7.1-1.dsc 8179a7a843d257ddb585f4c65599844bc0e516fe85e97f6f87a7ceade4eb5165 296818 cmus_2.7.1.orig.tar.gz 74aa5364fed2ba258c0a8299549abb2c9f0e316b1638e2e695e05417cb6ce79e 8780 cmus_2.7.1-1.debian.tar.xz Files: 967dfe96d1c08596c8b136c59bbd54c2 2381 sound optional cmus_2.7.1-1.dsc 0588ab955db44a8e9deb03446d73b5df 296818 sound optional cmus_2.7.1.orig.tar.gz 8b302981889847f3ca43090da2be3edf 8780 sound optional cmus_2.7.1-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJWSM41AAoJEGny/FFupxmTo2wP/3IYev/Wb000A4FubKq+puuT XmozhAOl/anNaxVTmNQMD8ZYE5ilExB5ImkHthoEz0VBNFlzoYnocm+a0ElEwOjA jfWsAdBlW6yOTiuitZvl74Gv3kK3EERHopu2cc+DMtHTJiKx3nrdnDfNyJnY9ZOx 7N6F9kC8IWubAZ/X+Q1mX5E+QVVISxXNcL8hE3gBI22EtUMYbaZB4LQPHNxPbwzj CIoTvvQJAHyVfwkLJnJCYmAHtLWmDn3Z7JHQutJDEy53Ud2q7GbS8XZDgGLJRI57 /2fY/vTCZb9Jp92+JI3JAIf7PU8FrYjwAHE1swzGG9AnoeFBHmx+Gf7bvBCKsbEr Mg6NorkNsucIELycztcs05kjYotiToZIT3CLPLiHK2GshCfdyBhvefMBrceB9GGF Dq/1XV08GVbPkueHikaPfKagfC37WX1FrSBbB9lGSrme51/AjV0b/Hd6aesUFIy6 Vq/pnZKkehNzO+tGJrRQ7BKUewd9QT2py9eXAxmn7GmRxlioe5lgJkz+h/jLFs7b SCcJxOzLUJ0uYCIZH0mvReePnrbfFM0D3Iak0ce2nYgKlbEMMjzGx1FdZu6owBJI V+ecvM4l/YsUYznZCuyG7TO/hZdJI4KvoTOX22aeTfTD9qlCnC1AtK1iKeBx9KqT VXk/nBPAaSlypMS75bzL =ly3v -----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
