Debian Bug report logs - #619428
python-gdata: Embedded copies of Crypto and oauth

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Stefano Rivera <stefanor@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: python-gdata: Embedded copies of Crypto and oauth

Date: Wed, 23 Mar 2011 21:28:54 +0200

Package: python-gdata
Version: 2.0.14-2
Severity: normal

Hi, python-gdata embeds a copy of Crypto (as found in python-crypto),
oauth (as found in python-oauth), and tlslite (which isn't packaged
separately yet).

Debian Policy states:
| 4.13 Convenience copies of code
|
| Some software packages include in their distribution convenience copies
| of code from other software packages, generally so that users compiling
| from source don't have to download multiple packages. Debian packages
| should not make use of these convenience copies unless the included
| package is explicitly intended to be used in this way.[27] If the
| included code is already in the Debian archive in the form of a library,
| the Debian packaging should ensure that binary packages reference the
| libraries already in Debian and the convenience copy is not used. If the
| included code is not already in Debian, it should be packaged separately
| as a prerequisite if possible. [28]

I suggest evaluating whether these libraries have been modified
for gdata, or are simply convenience copies. If possible the versions
packaged for Debian should be used, by modifying the import statements or
replacing them with dummy files importing the original versions.

SR

-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_ZA.UTF-8, LC_CTYPE=en_ZA.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages python-gdata depends on:
ii  python                  2.6.6-3+squeeze6 interactive high-level object-orie
ii  python-support          1.0.11           automated rebuilding support for P

python-gdata recommends no packages.

Versions of packages python-gdata suggests:
ii  python-gdata-doc              2.0.14-2   Google Data Python client library,

-- no debconf information

Message #10 received at 619428@bugs.debian.org (full text, mbox, reply):

From: Andreas Noteng <andreas@noteng.no>

To: Stefano Rivera <stefanor@debian.org>, 619428@bugs.debian.org

Subject: Re: Bug#619428: python-gdata: Embedded copies of Crypto and oauth

Date: Fri, 25 Mar 2011 15:00:53 +0100

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 03/23/2011 08:28 PM, Stefano Rivera wrote:
> Package: python-gdata
> Version: 2.0.14-2
> Severity: normal
> 
> Hi, python-gdata embeds a copy of Crypto (as found in python-crypto),
> oauth (as found in python-oauth), and tlslite (which isn't packaged
> separately yet).
As far as I can see, only tlslite imports Crypto. Tlslite seems to be
already packaged for debian, but it seems to have been stuck in the new
queue for more than four months now [1]. Anything we can do to rush that?
I have removed oauth from gdata, and it seems to work, I'll commit it
once I know for sure.
Once python-tlslite gets accepted, both tlslite and Crypto can be
removed from the gdata package

[1] http://ftp-master.debian.org/new/tlslite_0.3.8-1.html

Regards
Andreas Noteng
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=R+iw
-----END PGP SIGNATURE-----

Message #15 received at 619428@bugs.debian.org (full text, mbox, reply):

From: Stefano Rivera <stefanor@debian.org>

To: Andreas Noteng <andreas@noteng.no>

Cc: 619428@bugs.debian.org

Subject: Re: Bug#619428: python-gdata: Embedded copies of Crypto and oauth

Date: Fri, 25 Mar 2011 17:37:38 +0200

Hi Andreas (2011.03.25_16:00:53_+0200)
> Tlslite seems to be already packaged for debian, but it seems to have
> been stuck in the new queue for more than four months now [1].

Aha, actually a lot shorter than that. [2] says 2 days. So it was
uploaded after this was filed, and there was no ITP, thus I missed it. I
think clint had it ready and waiting and only got around to uploading it
a week ago [3].

[2]: http://ftp-master.debian.org/new.html
[3]: http://git.debian.org/?p=collab-maint/tlslite.git

> Anything we can do to rush that?

It's probably got about 2 months to go. I've had a quick look at it, and
it looks fine, I'd expect it to be accepted. We can poke a friendly
ftp-master to review it, but I don't see any reason not to just wait
patiently.

Good to hear that this is easily resolvable.

SR

-- 
Stefano Rivera
  http://tumbleweed.org.za/
  H: +27 21 465 6908 C: +27 72 419 8559  UCT: x3127

Message #22 received at 619428@bugs.debian.org (full text, mbox, reply):

From: Dmitry Shachnev <mitya57@gmail.com>

To: 619428@bugs.debian.org

Subject: Re: Bug#619428: python-gdata: Embedded copies of Crypto and oauth

Date: Sun, 27 May 2012 19:39:41 +0400

My analysis on this issue (I'm now a de facto maintainer of python-gdata):

- oauth: It's modified in gdata, list of changes is avaiable in
src/gdata/oauth/CHANGES.txt.
- tlslite: The package is orphaned, I don't want to depend on it and I
really hope it'll be adopted by someone.
- crypto: Removed.

--
Dmitry Shachnev

Message #35 received at 619428@bugs.debian.org (full text, mbox, reply):

From: Dmitry Shachnev <mitya57@gmail.com>

To: control@bugs.debian.org

Cc: 619428@bugs.debian.org

Subject: Re: Bug#619428: python-gdata: Embedded copies of Crypto and oauth

Date: Wed, 30 May 2012 13:38:53 +0400

affects 619428 =python-gdata
found 619428 2.0.16-1
retitle 619428 Embedded copies of Crypto and oauth
thanks

Sorry, I have mixed up the bug number, reverting things back.

--
Dmitry Shachnev

Message #54 received at 619428-close@bugs.debian.org (full text, mbox, reply):

From: Dmitry Shachnev <mitya57@gmail.com>

To: 619428-close@bugs.debian.org

Subject: Bug#619428: fixed in python-gdata 2.0.17-2

Date: Fri, 23 Nov 2012 14:47:53 +0000

Source: python-gdata
Source-Version: 2.0.17-2

We believe that the bug you reported is fixed in the latest version of
python-gdata, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 619428@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Dmitry Shachnev <mitya57@gmail.com> (supplier of updated python-gdata package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Fri, 23 Nov 2012 15:04:25 +0400
Source: python-gdata
Binary: python-gdata python-gdata-doc
Architecture: source all
Version: 2.0.17-2
Distribution: experimental
Urgency: low
Maintainer: Debian Python Modules Team <python-modules-team@lists.alioth.debian.org>
Changed-By: Dmitry Shachnev <mitya57@gmail.com>
Description: 
 python-gdata - Google Data Python client library
 python-gdata-doc - Google Data Python client library, documentation and examples
Closes: 619428 622083
Changes: 
 python-gdata (2.0.17-2) experimental; urgency=low
 .
   * Remove bundled python-crypto copy (closes: #619428).
   * Make python-gdata-doc suggest python-gdata.
   * Drop fix_wrong_interpreter_path.patch, no longer needed.
   * Set priority to optional (instead of extra).
   * Bump debhelper compat level to 9.
   * Run tests during build (closes: #622083).
     + debian/patches/tests_dont_return_zero_on_failures.patch:
       make tests return non-zero value on failures.
     + debian/patches/disable_network_test.patch:
       disable test that relies on network connection.
   * Bump Standards-Version to 3.9.4, no changes needed.
Checksums-Sha1: 
 0a8c19d9eec31f61a23b4ae5979727866f480aee 2151 python-gdata_2.0.17-2.dsc
 d2d9f60699611f95dd8c328691a2555e76191c0c 2398047 python-gdata_2.0.17.orig.tar.gz
 3a0c15011a42731ce8b20437afd2edf14c893607 7041 python-gdata_2.0.17-2.debian.tar.gz
 3971b9237e825d9815e7ba07e45bcc03239c5178 483176 python-gdata_2.0.17-2_all.deb
 3c59fa637b7a32a4da59c67111fc2582d4d7c90c 1653516 python-gdata-doc_2.0.17-2_all.deb
Checksums-Sha256: 
 6add3419c6eef5c1b6d45a6045d00f7e221a7d58eb4002e919957bf23b0c0c4d 2151 python-gdata_2.0.17-2.dsc
 ad72274532d726304733c5bfc01bffab8c7a34ce7e730deed849aecb62c5aa2d 2398047 python-gdata_2.0.17.orig.tar.gz
 fe8d1eaa9a869f782ffe9143ccd9b92a77e1201e081a7b4d16caeaec9981c418 7041 python-gdata_2.0.17-2.debian.tar.gz
 b0c16217c803fc184972db1e7a9867dcffb2539c56a74452a0a8b6ef8a75b669 483176 python-gdata_2.0.17-2_all.deb
 a2738ecc38a1d545e3c20e79b222093ea6213b9de990b445aa355a9e6d694f60 1653516 python-gdata-doc_2.0.17-2_all.deb
Files: 
 3308490fe4f94963d23a85f060f9841f 2151 python optional python-gdata_2.0.17-2.dsc
 8c3600cf02c6c228e28e366b2e5d5c32 2398047 python optional python-gdata_2.0.17.orig.tar.gz
 d12debf29492b5f605f4ab222d3c5f6b 7041 python optional python-gdata_2.0.17-2.debian.tar.gz
 782a00afff07aae86a0ac5b228167031 483176 python optional python-gdata_2.0.17-2_all.deb
 10c0324902bf808fefcf856bdf2b6bcf 1653516 doc optional python-gdata-doc_2.0.17-2_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
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=NdRe
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.