Debian Bug report logs -
#938632
teeworlds: Python2 removal in sid/bullseye
Reported by: Matthias Klose <doko@debian.org>
Date: Fri, 30 Aug 2019 09:47:50 UTC
Severity: normal
Tags: bullseye, fixed-upstream, sid
Found in version teeworlds/0.7.2-5
Fixed in version teeworlds/0.7.5-1
Done: Markus Koschany <apo@debian.org>
Bug is archived. No further changes may be made.
Toggle useless messages
Report forwarded
to Debian Games Team <pkg-games-devel@lists.alioth.debian.org>:
Bug#938632; Package src:teeworlds.
(Fri, 30 Aug 2019 09:47:53 GMT) (full text, mbox, link).
Acknowledgement sent
to Matthias Klose <doko@debian.org>:
New Bug report received and forwarded. Copy sent to Debian Games Team <pkg-games-devel@lists.alioth.debian.org>.
(Fri, 30 Aug 2019 09:47:53 GMT) (full text, mbox, link).
Message #5 received at maintonly@bugs.debian.org (full text, mbox, reply):
Package: src:teeworlds
Version: 0.7.2-5
Severity: normal
Tags: sid bullseye
User: debian-python@lists.debian.org
Usertags: py2removal
Python2 becomes end-of-live upstream, and Debian aims to remove
Python2 from the distribution, as discussed in
https://lists.debian.org/debian-python/2019/07/msg00080.html
Your package either build-depends, depends on Python2, or uses Python2
in the autopkg tests. Please stop using Python2, and fix this issue
by one of the following actions.
- Convert your Package to Python3. This is the preferred option. In
case you are providing a Python module foo, please consider dropping
the python-foo package, and only build a python3-foo package. Please
don't drop Python2 modules, which still have reverse dependencies,
just document them.
This is the preferred option.
- If the package is dead upstream, cannot be converted or maintained
in Debian, it should be removed from the distribution. If the
package still has reverse dependencies, raise the severity to
"serious" and document the reverse dependencies with the BTS affects
command. If the package has no reverse dependencies, confirm that
the package can be removed, reassign this issue to ftp.debian.org,
make sure that the bug priority is set to normal and retitle the
issue to "RM: PKG -- removal triggered by the Python2 removal".
- If the package has still many users (popcon >= 300), or is needed to
build another package which cannot be removed, document that by
adding the "py2keep" user tag (not replacing the py2remove tag),
using the debian-python@lists.debian.org user. Also any
dependencies on an unversioned python package (python, python-dev)
must not be used, same with the python shebang. These have to be
replaced by python2/python2.7 dependencies and shebang.
This is the least preferred option.
If the conversion or removal needs action on another package first,
please document the blocking by using the BTS affects command, like
affects <bug number of blocking py2removal bug> + src:teeworlds
If there is no py2removal bug for that reverse-dependency, please file
a bug on this package (similar to this bug report).
If there are questions, please refer to the wiki page for the removal:
https://wiki.debian.org/Python/2Removal, or ask for help on IRC
#debian-python, or the debian-python@lists.debian.org mailing list.
Added indication that bug 938632 blocks 937695
Request was from Sandro Tosi <morph@debian.org>
to control@bugs.debian.org.
(Mon, 21 Oct 2019 23:22:15 GMT) (full text, mbox, link).
Added tag(s) fixed-upstream.
Request was from John Scott <jscott@posteo.net>
to control@bugs.debian.org.
(Tue, 07 Jan 2020 19:03:05 GMT) (full text, mbox, link).
Information forwarded
to debian-bugs-dist@lists.debian.org, Debian Games Team <pkg-games-devel@lists.alioth.debian.org>:
Bug#938632; Package src:teeworlds.
(Wed, 05 Feb 2020 01:33:03 GMT) (full text, mbox, link).
Acknowledgement sent
to John Scott <jscott@posteo.net>:
Extra info received and forwarded to list. Copy sent to Debian Games Team <pkg-games-devel@lists.alioth.debian.org>.
(Wed, 05 Feb 2020 01:33:03 GMT) (full text, mbox, link).
Message #14 received at 938632@bugs.debian.org (full text, mbox, reply):
It appears Teeworlds has been using Python 3 for at least the past year: https://github.com/teeworlds/teeworlds/commit/9bd2a2d98681add573e7e356eef361fde2ccd082
Severity set to 'serious' from 'normal'
Request was from Sandro Tosi <morph@debian.org>
to control@bugs.debian.org.
(Wed, 08 Jul 2020 06:39:36 GMT) (full text, mbox, link).
Severity set to 'normal' from 'serious'
Request was from Sandro Tosi <morph@debian.org>
to control@bugs.debian.org.
(Wed, 08 Jul 2020 07:03:32 GMT) (full text, mbox, link).
Message sent on
to Matthias Klose <doko@debian.org>:
Bug#938632.
(Sun, 30 Aug 2020 15:36:02 GMT) (full text, mbox, link).
Message #21 received at 938632-submitter@bugs.debian.org (full text, mbox, reply):
Control: tag -1 pending
Hello,
Bug #938632 in teeworlds reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:
https://salsa.debian.org/games-team/teeworlds/-/commit/9def6b59e0c7bd168a731dcbdf646551db052c75
------------------------------------------------------------------------
Import Debian changes 0.7.5-1
teeworlds (0.7.5-1) unstable; urgency=medium
.
* Team upload.
.
[ Dylan Aïssi ]
* Remove patches applied upstream:
- CVE-2019-10877.patch
- CVE-2019-10878.patch
- CVE-2019-10879.patch
- immintrin_FTBFS.patch
- no-sse2-required.patch
- recursiv_dir.patch
.
[ Markus Koschany ]
* New upstream version 0.7.5.
- Fix CVE-2020-12066: Remote denial-of-service.
* Build-depend on python3 instead of python. Fix python3 incompatibilities.
(Closes: #967213, #938632)
* Refresh the patches. Use system library libjsonparser-dev. (Closes: #958249)
* Switch to debhelper-compat = 13.
* Declare compliance with Debian Policy 4.5.0.
------------------------------------------------------------------------
(this message was generated automatically)
--
Greetings
https://bugs.debian.org/938632
Added tag(s) pending.
Request was from Markus Koschany <noreply@salsa.debian.org>
to 938632-submitter@bugs.debian.org.
(Sun, 30 Aug 2020 15:36:02 GMT) (full text, mbox, link).
Reply sent
to Markus Koschany <apo@debian.org>:
You have taken responsibility.
(Sun, 30 Aug 2020 15:51:08 GMT) (full text, mbox, link).
Notification sent
to Matthias Klose <doko@debian.org>:
Bug acknowledged by developer.
(Sun, 30 Aug 2020 15:51:09 GMT) (full text, mbox, link).
Message #28 received at 938632-close@bugs.debian.org (full text, mbox, reply):
Source: teeworlds
Source-Version: 0.7.5-1
Done: Markus Koschany <apo@debian.org>
We believe that the bug you reported is fixed in the latest version of
teeworlds, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 938632@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Markus Koschany <apo@debian.org> (supplier of updated teeworlds package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 30 Aug 2020 15:38:14 +0200
Source: teeworlds
Architecture: source
Version: 0.7.5-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Games Team <pkg-games-devel@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Closes: 938632 958249 967213
Changes:
teeworlds (0.7.5-1) unstable; urgency=medium
.
* Team upload.
.
[ Dylan Aïssi ]
* Remove patches applied upstream:
- CVE-2019-10877.patch
- CVE-2019-10878.patch
- CVE-2019-10879.patch
- immintrin_FTBFS.patch
- no-sse2-required.patch
- recursiv_dir.patch
.
[ Markus Koschany ]
* New upstream version 0.7.5.
- Fix CVE-2020-12066: Remote denial-of-service.
* Build-depend on python3 instead of python. Fix python3 incompatibilities.
(Closes: #967213, #938632)
* Refresh the patches. Use system library libjsonparser-dev. (Closes: #958249)
* Switch to debhelper-compat = 13.
* Declare compliance with Debian Policy 4.5.0.
Checksums-Sha1:
51b0ae43e5aef1a2bf4713b6c61b7ea10a631f18 2412 teeworlds_0.7.5-1.dsc
129360a259154708a7d0d417805f4b1d8f085a05 8611256 teeworlds_0.7.5.orig.tar.xz
e4892ba90ef12c389411b5061f9ad22b25870d34 34272 teeworlds_0.7.5-1.debian.tar.xz
12c3366315b9223c793b876d0cf713c841b5005b 12434 teeworlds_0.7.5-1_amd64.buildinfo
Checksums-Sha256:
af64bf24d916141a83ec4beef40d5d82202a3b746d9ddf6c782cb1aa0366154c 2412 teeworlds_0.7.5-1.dsc
af52f62daa5c4d0602c3984940dceec6b756ac9ee95f197f90055dfb8beb01f0 8611256 teeworlds_0.7.5.orig.tar.xz
08ceb73164c79068c9b2a87bb9e63eb40712d1f52ceb2ff652d3921a5132bb1d 34272 teeworlds_0.7.5-1.debian.tar.xz
eaf2633f6573313bd398e79fc32bfed1b8ffc46b762493ebf5229bdac952aabb 12434 teeworlds_0.7.5-1_amd64.buildinfo
Files:
8c5e47b098a4e85f2dcd6949f95537f0 2412 games optional teeworlds_0.7.5-1.dsc
bccb198eac647d74ded2f74d2fc50466 8611256 games optional teeworlds_0.7.5.orig.tar.xz
462b6f1584a41c514ae9b20e3f041117 34272 games optional teeworlds_0.7.5-1.debian.tar.xz
caaf1c2482764702bf12c1579a176a6c 12434 games optional teeworlds_0.7.5-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=qHwm
-----END PGP SIGNATURE-----
Bug archived.
Request was from Debbugs Internal Request <owner@bugs.debian.org>
to internal_control@bugs.debian.org.
(Sat, 03 Oct 2020 07:27:25 GMT) (full text, mbox, link).
Send a report that this bug log contains spam.
Debian bug tracking system administrator <owner@bugs.debian.org>.
Last modified:
Sun Mar 10 03:46:45 2024;
Machine Name:
buxtehude
Debian Bug tracking system
Debbugs is free software and licensed under the terms of the GNU
Public License version 2. The current version can be obtained
from https://bugs.debian.org/debbugs-source/.
Copyright © 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson,
2005-2017 Don Armstrong, and many other contributors.