[Debian-med-packaging] Bug#989661: libmaus2: binary packages built using libsecrecy

[Étienne Mollier]

Source: libmaus2
Version: 2.0.768+dfsg-1
Severity: serious
Tags: patch
Justification: Policy 7.8

Greetings,

I recalled about libsecrecy being a headers only library, and
that it was inlined in libmaus2.  The libmaus2 is for the most
part a GPL-3+ software.  This means the full source code to
build the libmaus2 must be made available, including the exact
version of the libsecrecy used for constructing the following
binary packages:

  * libmaus2-2, which embeds shared objects built using
    libsecrecy headers,
  * and libmaus2-dev, which offers among other things, the
    corresponding static libraries.

To be able to rebuild these packages, one would have to know
they have been built using the current version of libsecrecy,
presently 0.0.2+dfsg-2.  This needs to be documented throught
the following Built-Using field applied against control files of
the two binary package:

	Built-Using: libsecrecy (= 0.0.2+dfsg-2)

Following the model in use for SIMDe[1], I intend to apply the
patch in attachment and upload the package.  This bug entry is
mostly to document the issue for the release team, as we're in
hard-freeze.

[1]: https://wiki.debian.org/SIMDEverywhere

Cheers,  :)
-- 
Étienne Mollier <etienne.mollier at mailoo.org>
Fingerprint:  8f91 b227 c7d6 f2b1 948c  8236 793c f67e 8f0d 11da
Sent from /dev/pts/2, please excuse my verbosity.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: libmaus2-built-using-libsecrecy.patch
Type: text/x-diff
Size: 1855 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/debian-med-packaging/attachments/20210609/382049c1/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/debian-med-packaging/attachments/20210609/382049c1/attachment.sig>