[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#848698: marked as done (RFS: imagemagick/8:6.9.7.0+dfsg-1 [RC,Security][experimental])



Your message dated Thu, 22 Dec 2016 10:45:52 +0000 (UTC)
with message-id <888483557.343231.1482403552618@mail.yahoo.com>
and subject line Re: Bug#848698: [RC] imagemagick
has caused the Debian Bug report #848698,
regarding RFS: imagemagick/8:6.9.7.0+dfsg-1 [RC,Security][experimental]
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
848698: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848698
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: sponsorship-requests
Severity: important
control: block  846385- by -1

  Dear mentors,

  I am looking for a sponsor for my package "imagemagick"

 * Package name    : imagemagick
   Version         : 8:6.9.7.0+dfsg-1
   Section         : graphics

  It builds those binary packages:

    imagemagick - image manipulation programs -- binaries
 imagemagick-6-common - image manipulation programs -- infrastructure
 imagemagick-6-doc - document files of ImageMagick
 imagemagick-6.q16 - image manipulation programs -- quantum depth Q16
 imagemagick-6.q16hdri - image manipulation programs -- quantum depth Q16HDRI
 imagemagick-common - image manipulation programs -- infrastructure
dummy package
 imagemagick-doc - document files of ImageMagick -- dummy package
 libimage-magick-perl - Perl interface to the ImageMagick graphics routines
 libimage-magick-q16-perl - Perl interface to the ImageMagick graphics
routines -- Q16 versio
 libimage-magick-q16hdri-perl - Perl interface to the ImageMagick
graphics routines -- Q16HDRI ve
 libmagick++-6-headers - object-oriented C++ interface to ImageMagick
- header files
 libmagick++-6.q16-7 - C++ interface to ImageMagick -- quantum depth Q16
 libmagick++-6.q16-dev - C++ interface to ImageMagick - development files (Q16)
 libmagick++-6.q16hdri-7 - C++ interface to ImageMagick -- quantum depth Q16HDRI
 libmagick++-6.q16hdri-dev - C++ interface to ImageMagick -
development files (Q16HDRI)
 libmagick++-dev - object-oriented C++ interface to ImageMagick -- dummy package
 libmagickcore-6-arch-config - low-level image manipulation library -
architecture header files
 libmagickcore-6-headers - low-level image manipulation library - header files
 libmagickcore-6.q16-3 - low-level image manipulation library --
quantum depth Q16
 libmagickcore-6.q16-3-extra - low-level image manipulation library -
extra codecs (Q16)
 libmagickcore-6.q16-dev - low-level image manipulation library -
development files (Q16)
 libmagickcore-6.q16hdri-3 - low-level image manipulation library --
quantum depth Q16HDRI
 libmagickcore-6.q16hdri-3-extra - low-level image manipulation
library - extra codecs (Q16HDRI)
 libmagickcore-6.q16hdri-dev - low-level image manipulation library -
development files (Q16HDRI
 libmagickcore-dev - low-level image manipulation library -- dummy package
 libmagickwand-6-headers - image manipulation library - headers files
 libmagickwand-6.q16-3 - image manipulation library -- quantum depth Q16
 libmagickwand-6.q16-dev - image manipulation library - development files (Q16)
 libmagickwand-6.q16hdri-3 - image manipulation library -- quantum depth Q16HDRI
 libmagickwand-6.q16hdri-dev - image manipulation library -
development files (Q16HDRI)
 libmagickwand-dev - image manipulation library -- dummy package
 perlmagick - Perl interface to ImageMagick -- dummy package

  To access further information about this package, please visit the
following URL:

  https://mentors.debian.net/package/imagemagick


  Alternatively, one can download the package with dget using this command:

    dget -x https://mentors.debian.net/debian/pool/main/i/imagemagick/imagemagick_6.9.7.0+dfsg-1.dsc

 imagemagick (8:6.9.7.0+dfsg-1) experimental; urgency=high
 .
   * Bump so version due to structure change
     thanks to Nishanth Aravamudan (Closes: #846385).
   * Fix CVE-2016-8707  ImageMagick Convert Tiff Adobe Deflate
     Code Execution Vulnerability (Closes: #848139)
   * Bug fix: "fails to upgrade wheezy -> jessie -> stretch", thanks
     to Andreas Beckmann (Closes: #847282).


  Changes since the last upload:

--- End Message ---
--- Begin Message ---
Hi Bastien,

you are mostly a DD, so I just did a superficial review (even because
I can't understand all the huge changes you did)

some nitpicks:
1)

-%  Copyright 1999-2016 ImageMagick Studio LLC, a non-profit organization      %
+%  Copyright 1999-2017 ImageMagick Studio LLC, a non-profit organization      %


do upstream have some sort of time-machine?
last time I checked we still were in 2016
(FWIW you also need to document that change in copyright file, sigh)


2)

symbols bumped (all, sigh!) to 
+ (optional=InternalABInoAPI)MagickPlusPlusDestroyMagick@Base 8:6.9.6.8

"8:6.9.6.8" but version is now 8:6.9.7.0

usually you should bump to the correct version, and only the symbols
that had an incompatible change.


3) shouldn't you also fix unstable?

4) renaming patches makes reviews really difficult, the diff of the only
debian directory is ~28K LOC

your workflow seems to be pretty impossible to follow by me, but you are mostly
a DD and you maintain this package since ~7 years, so I'll sponsor it as-is

thanks

G.

--- End Message ---

Reply to: