Debian Bug report logs - #629222
pidgin: please remove SILC support

version graph

Package: pidgin; Maintainer for pidgin is Ari Pollak <ari@debian.org>; Source for pidgin is src:pidgin (PTS, buildd, popcon).

Reported by: Jérémy Bobbio <lunar@debian.org>

Date: Sat, 4 Jun 2011 15:57:15 UTC

Severity: wishlist

Found in version pidgin/2.7.11-2

Fixed in version pidgin/2.8.0-1

Done: Ari Pollak <ari@debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to debian-bugs-dist@lists.debian.org, pkg-silc-devel@lists.alioth.debian.org, Ari Pollak <ari@debian.org>:
Bug#629222; Package pidgin. (Sat, 04 Jun 2011 15:57:18 GMT) (full text, mbox, link).

Acknowledgement sent to Jérémy Bobbio <lunar@debian.org>:
New Bug report received and forwarded. Copy sent to pkg-silc-devel@lists.alioth.debian.org, Ari Pollak <ari@debian.org>. (Sat, 04 Jun 2011 15:57:18 GMT) (full text, mbox, link).

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Jérémy Bobbio <lunar@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: pidgin: please remove SILC support
Date: Sat, 4 Jun 2011 17:27:12 +0200
[Message part 1 (text/plain, inline)]
Package: pidgin
Version: 2.7.11-2
Severity: important

Hi!

As silc-toolkit is currently orphaned, security support is probably
far from optimal.

For this reason, I think it would probably be a good idea to drop SILC
support from pidgin until SILC libraries gets either removed or properly
maintained.

Cheers,
-- 
Jérémy Bobbio                        .''`. 
lunar@debian.org                    : :Ⓐ  :  # apt-get install anarchism
                                    `. `'` 
                                      `-   

[signature.asc (application/pgp-signature, inline)]

Message sent on to Jérémy Bobbio <lunar@debian.org>:
Bug#629222. (Sat, 11 Jun 2011 19:27:07 GMT) (full text, mbox, link).

Message #8 received at 629222-submitter@bugs.debian.org (full text, mbox, reply):

From: Ari Pollak <ari@debian.org>
To: 629222-submitter@bugs.debian.org
Date: Sat, 11 Jun 2011 15:22:43 -0400
If there is no proper security support, why is libsilc still in Debian?

Information stored :
Bug#629222; Package pidgin. (Sun, 12 Jun 2011 15:57:14 GMT) (full text, mbox, link).

Acknowledgement sent to Jérémy Bobbio <lunar@debian.org>:
Extra info received and filed, but not forwarded. (Sun, 12 Jun 2011 15:57:14 GMT) (full text, mbox, link).

Message #13 received at 629222-quiet@bugs.debian.org (full text, mbox, reply):

From: Jérémy Bobbio <lunar@debian.org>
To: Ari Pollak <ari@debian.org>, 629222-quiet@bugs.debian.org
Subject: Re: Bug#629222: (no subject)
Date: Sun, 12 Jun 2011 17:45:54 +0200
[Message part 1 (text/plain, inline)]
On Sat, Jun 11, 2011 at 03:22:43PM -0400, Ari Pollak wrote:
> If there is no proper security support, why is libsilc still in Debian?

libsilc is still in Lenny and Squeeze, and security updates will be
done if any issue appears.

But if no one steps up to do that for Wheezy, it should get removed from
Debian. If SILC support gets removed from Pidgin, someone might need it
badly enough to volunteer, that's why I am not filling a removal request
right now.

Cheers,
-- 
Jérémy Bobbio                        .''`. 
jeremy.bobbio@irq7.fr               : :   :             lunar@debian.org
                                    `. `'` 
                                      `-

[signature.asc (application/pgp-signature, inline)]

Severity set to 'wishlist' from 'important' Request was from Ari Pollak <ari@debian.org> to control@bugs.debian.org. (Sun, 12 Jun 2011 18:15:02 GMT) (full text, mbox, link).

Information stored :
Bug#629222; Package pidgin. (Sun, 12 Jun 2011 18:15:05 GMT) (full text, mbox, link).

Acknowledgement sent to Ari Pollak <ari@debian.org>:
Extra info received and filed, but not forwarded. (Sun, 12 Jun 2011 18:15:05 GMT) (full text, mbox, link).

Message #20 received at 629222-quiet@bugs.debian.org (full text, mbox, reply):

From: Ari Pollak <ari@debian.org>
To: lunar@debian.org, control@bugs.debian.org
Cc: 629222-quiet@bugs.debian.org
Subject: Re: Bug#629222: (no subject)
Date: Sun, 12 Jun 2011 14:11:57 -0400
severity 629222 wishlist

I'm afraid I don't agree with this logic. If many people use SILC 
support and I remove it, I'm going to have to deal with the complaints, 
and I'd prefer not to use Pidgin as a tool to get people to volunteer 
for some other package.

On 06/12/2011 11:45 AM, Jérémy Bobbio wrote:
> But if no one steps up to do that for Wheezy, it should get removed from
> Debian. If SILC support gets removed from Pidgin, someone might need it
> badly enough to volunteer, that's why I am not filling a removal request
> right now.

Information stored :
Bug#629222; Package pidgin. (Sun, 12 Jun 2011 18:36:03 GMT) (full text, mbox, link).

Acknowledgement sent to Jérémy Bobbio <lunar@debian.org>:
Extra info received and filed, but not forwarded. (Sun, 12 Jun 2011 18:36:03 GMT) (full text, mbox, link).

Message #25 received at 629222-quiet@bugs.debian.org (full text, mbox, reply):

From: Jérémy Bobbio <lunar@debian.org>
To: Ari Pollak <ari@debian.org>
Cc: 629222-quiet@bugs.debian.org
Subject: Re: Bug#629222: (no subject)
Date: Sun, 12 Jun 2011 20:33:10 +0200
[Message part 1 (text/plain, inline)]
On Sun, Jun 12, 2011 at 02:11:57PM -0400, Ari Pollak wrote:
> I'm afraid I don't agree with this logic. If many people use SILC
> support and I remove it, I'm going to have to deal with the
> complaints, and I'd prefer not to use Pidgin as a tool to get people
> to volunteer for some other package.

Should I ask ftpmasters to remove libsilc now, then?

(Unfortunately, you might still get complaints from Pidgin users…)

-- 
Jérémy Bobbio                        .''`. 
lunar@debian.org                    : :Ⓐ  :  # apt-get install anarchism
                                    `. `'` 
                                      `-   

[signature.asc (application/pgp-signature, inline)]

Information stored :
Bug#629222; Package pidgin. (Sun, 12 Jun 2011 18:39:06 GMT) (full text, mbox, link).

Acknowledgement sent to Ari Pollak <ari@debian.org>:
Extra info received and filed, but not forwarded. (Sun, 12 Jun 2011 18:39:06 GMT) (full text, mbox, link).

Message #30 received at 629222-quiet@bugs.debian.org (full text, mbox, reply):

From: Ari Pollak <ari@debian.org>
To: 629222-quiet@bugs.debian.org
Subject: Re: Bug#629222: (no subject)
Date: Sun, 12 Jun 2011 14:35:32 -0400
On 06/12/2011 02:33 PM, Jérémy Bobbio wrote:
> Should I ask ftpmasters to remove libsilc now, then?
>
> (Unfortunately, you might still get complaints from Pidgin users…)

Yes, if you think that would be better than keeping it in. At least then 
when I remove it from Pidgin, I'll have a legitimate reason.

Reply sent to Ari Pollak <ari@debian.org>:
You have taken responsibility. (Tue, 14 Jun 2011 02:51:08 GMT) (full text, mbox, link).

Notification sent to Jérémy Bobbio <lunar@debian.org>:
Bug acknowledged by developer. (Tue, 14 Jun 2011 02:51:08 GMT) (full text, mbox, link).

Message #35 received at 629222-close@bugs.debian.org (full text, mbox, reply):

From: Ari Pollak <ari@debian.org>
To: 629222-close@bugs.debian.org
Subject: Bug#629222: fixed in pidgin 2.8.0-1
Date: Tue, 14 Jun 2011 02:48:13 +0000
Source: pidgin
Source-Version: 2.8.0-1

We believe that the bug you reported is fixed in the latest version of
pidgin, which is due to be installed in the Debian FTP archive:

finch-dev_2.8.0-1_all.deb
  to main/p/pidgin/finch-dev_2.8.0-1_all.deb
finch_2.8.0-1_amd64.deb
  to main/p/pidgin/finch_2.8.0-1_amd64.deb
libpurple-bin_2.8.0-1_all.deb
  to main/p/pidgin/libpurple-bin_2.8.0-1_all.deb
libpurple-dev_2.8.0-1_all.deb
  to main/p/pidgin/libpurple-dev_2.8.0-1_all.deb
libpurple0_2.8.0-1_amd64.deb
  to main/p/pidgin/libpurple0_2.8.0-1_amd64.deb
pidgin-data_2.8.0-1_all.deb
  to main/p/pidgin/pidgin-data_2.8.0-1_all.deb
pidgin-dbg_2.8.0-1_amd64.deb
  to main/p/pidgin/pidgin-dbg_2.8.0-1_amd64.deb
pidgin-dev_2.8.0-1_all.deb
  to main/p/pidgin/pidgin-dev_2.8.0-1_all.deb
pidgin_2.8.0-1.debian.tar.gz
  to main/p/pidgin/pidgin_2.8.0-1.debian.tar.gz
pidgin_2.8.0-1.dsc
  to main/p/pidgin/pidgin_2.8.0-1.dsc
pidgin_2.8.0-1_amd64.deb
  to main/p/pidgin/pidgin_2.8.0-1_amd64.deb
pidgin_2.8.0.orig.tar.bz2
  to main/p/pidgin/pidgin_2.8.0.orig.tar.bz2



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 629222@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Ari Pollak <ari@debian.org> (supplier of updated pidgin package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

Format: 1.8
Date: Sun, 13 Jun 2011 21:17:20 -0400
Source: pidgin
Binary: libpurple0 pidgin pidgin-data pidgin-dev pidgin-dbg finch finch-dev libpurple-dev libpurple-bin
Architecture: source all amd64
Version: 2.8.0-1
Distribution: unstable
Urgency: low
Maintainer: Ari Pollak <ari@debian.org>
Changed-By: Ari Pollak <ari@debian.org>
Description: 
 finch      - text-based multi-protocol instant messaging client
 finch-dev  - text-based multi-protocol instant messaging client - development
 libpurple-bin - multi-protocol instant messaging library - extra utilities
 libpurple-dev - multi-protocol instant messaging library - development files
 libpurple0 - multi-protocol instant messaging library
 pidgin     - graphical multi-protocol instant messaging client for X
 pidgin-data - multi-protocol instant messaging client - data files
 pidgin-dbg - Debugging symbols for Pidgin
 pidgin-dev - multi-protocol instant messaging client - development files
Closes: 625462 629222 630124
Changes: 
 pidgin (2.8.0-1) unstable; urgency=low
 .
   * Imported Upstream version 2.8.0 (Closes: #630124)
   * Remove SILC support since the library will be orphaned (Closes: #629222)
   * Fix typo in libpurple-bin description (Closes: #625462)
Checksums-Sha1: 
 6f365461126baaef3b3b0f926d653d2f27a85dce 1857 pidgin_2.8.0-1.dsc
 c5b4f06fc88d57054953044c75563a473bb352fd 9921362 pidgin_2.8.0.orig.tar.bz2
 1c5cf8c1651dbf24f8a20d4273429bd035b49775 58730 pidgin_2.8.0-1.debian.tar.gz
 637a716d9026d966707f26f45a8c8b0a2bcb2e5c 8570926 pidgin-data_2.8.0-1_all.deb
 d00c6fb5e15232521f07b8c2a7f7026cdcd1be64 1823436 pidgin-dev_2.8.0-1_all.deb
 611ffabed656f631da677474b5a1a3b2d59fc7da 141158 finch-dev_2.8.0-1_all.deb
 fd93dc84ce6171df2183806f4b22c9785a959f07 304978 libpurple-dev_2.8.0-1_all.deb
 b291db837dc36633b8e20ed367f50ef473f2f234 114636 libpurple-bin_2.8.0-1_all.deb
 47a983faa39189895bd900ce3dcf791c2b691806 1990184 libpurple0_2.8.0-1_amd64.deb
 74050acf9ad1873bd0cdccfc32433a8b5390a998 808004 pidgin_2.8.0-1_amd64.deb
 e6f63d5c9fcf11a8be37ca3ec7607096179e0094 6827984 pidgin-dbg_2.8.0-1_amd64.deb
 b61ca637f84510970764991c9bdea0f698100f77 351070 finch_2.8.0-1_amd64.deb
Checksums-Sha256: 
 7349bf87727616766f6017fbb2cb19dfba1fab5272cd4f58752ae8196c97f319 1857 pidgin_2.8.0-1.dsc
 71ced93efecd48a1114eaf6370adebf591ace31158457baf023d15892d663c78 9921362 pidgin_2.8.0.orig.tar.bz2
 6f7e323db3a288baa685ea013c6f734c459cc7e4de18171760665379196399c9 58730 pidgin_2.8.0-1.debian.tar.gz
 16e42a43bd9664d7eeaefb1dd54be0238bc29f93c014c4197ad6fb3f25162443 8570926 pidgin-data_2.8.0-1_all.deb
 7e5a907a711a2ac8f67b9db397f77d1ee3d181da59e6712a85efb2b93d96034d 1823436 pidgin-dev_2.8.0-1_all.deb
 8ba3dd2a3065ad62d0fc6dc7f6ef9265aad2063b98936c942b25f7a20cb1c34e 141158 finch-dev_2.8.0-1_all.deb
 9315619ffc17f2f4808b598c20b52cf11f59adf10f340a22b6d964efa3a8d4e2 304978 libpurple-dev_2.8.0-1_all.deb
 b827b7781eea5a3315b8856dcc189b1f37b721762558f42ac15b8ced47b48275 114636 libpurple-bin_2.8.0-1_all.deb
 3409a209aac9bc844598f6b97fa9ecf6b346ba350631c0a548b47dbaf5ca8dcc 1990184 libpurple0_2.8.0-1_amd64.deb
 3bf7d8c0879a1b2bacacf4c1c73ef66d196d1a32c569f7af5f47a21ecc2efc86 808004 pidgin_2.8.0-1_amd64.deb
 0bae0f3b1b2198cc19802a989e98b2347055f764e152084c4ac44a703bbd0a71 6827984 pidgin-dbg_2.8.0-1_amd64.deb
 5172472732e0ddfb0b3da08c76cc082a92458b04e2c5414ce2c1e0720f6af888 351070 finch_2.8.0-1_amd64.deb
Files: 
 5c27b106f7b21f85223f019a59886428 1857 net optional pidgin_2.8.0-1.dsc
 d1656c443a5d91f4aa0d95915f1f50c3 9921362 net optional pidgin_2.8.0.orig.tar.bz2
 7bfec92c696860970bfe345d2afc0618 58730 net optional pidgin_2.8.0-1.debian.tar.gz
 d72aa3b1e6bdccc0443cb5ae9180a5a7 8570926 net optional pidgin-data_2.8.0-1_all.deb
 411aa46971d49375ac4d2c03a0451b9d 1823436 devel optional pidgin-dev_2.8.0-1_all.deb
 d2667cd3f6a64c41ff826f094c1812d3 141158 devel optional finch-dev_2.8.0-1_all.deb
 e793b515991305a84a9dd38ad06b775c 304978 libdevel optional libpurple-dev_2.8.0-1_all.deb
 0f6232e06eff2a7e59594b1be1f59fa2 114636 net optional libpurple-bin_2.8.0-1_all.deb
 d3c4c355979174e2b65fa202dfb2689b 1990184 net optional libpurple0_2.8.0-1_amd64.deb
 325a5920905f49c4242a9f3d47b06543 808004 net optional pidgin_2.8.0-1_amd64.deb
 d46d2dbdec6e0287ecf0627e329ecae1 6827984 debug extra pidgin-dbg_2.8.0-1_amd64.deb
 816d0eadf3bf46ba6d0da22b9dee47d3 351070 net optional finch_2.8.0-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEAREDAAYFAk32wXEACgkQwO+u47cOQDun4gCdEBvsYFjMym8SQQuz5Ma/M+eM
URoAoIJ1hif2hWZQMUV+3BM1vi1KB4LF
=Wsy3
-----END PGP SIGNATURE-----

Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Thu, 14 Jul 2011 07:32:31 GMT) (full text, mbox, link).

Send a report that this bug log contains spam.

Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Fri Jan 12 21:05:46 2018; Machine Name: beach

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.