[Pkg-tigervnc-devel] libjpeg-turbo packaging, lintian cleanup

[Osamu Aoki]

Hi,

(I had email problem .... resending))

On Fri, Jun 08, 2012 at 03:46:01PM +0200, Mike Gabriel wrote:
> Hi all,
> 
> the packaging of libjpeg-turbo will probably take place under the
> pkg-tigervnc-devel team roof.
> 
> git://git.debian.org/collab-maint/libjpeg-turbo.git
> 
> Current mission is a lintian clean of the package:
> 
> W: libjpeg-turbo source: out-of-date-standards-version 3.9.2
> (current is 3.9.3)
> W: libturbojpeg: shlib-without-versioned-soname
> usr/lib/x86_64-linux-gnu/libturbojpeg.so libturbojpeg.so
> W: libjpeg-turbo8: shlibs-declares-dependency-on-other-package libjpeg8 (>= 8)
> W: libjpeg-turbo-test: binary-without-manpage usr/bin/tjunittest
> W: libjpeg-turbo-progs: hardening-no-stackprotector usr/bin/jpegexiforient
> W: libjpeg-turbo-progs: hardening-no-fortify-functions usr/bin/jpegexiforient
> W: libjpeg-turbo-progs: hardening-no-relro usr/bin/jpegexiforient
> W: libjpeg-turbo-progs: hardening-no-stackprotector usr/bin/jpegtran
> W: libjpeg-turbo-progs: hardening-no-stackprotector usr/bin/rdjpgcom
> W: libjpeg-turbo-progs: hardening-no-stackprotector usr/bin/wrjpgcom
> N: 3 tags overridden (3 warnings)
> Finished running lintian.
> 
> The shown lintian issues are still non-pedantic and
> non-experimental. Let's get these done first...

Although changing 3.9.2->3.9.3 is simple, it needs DEP-5 license.  When
dealing with DEP-5 copyeright file, we need to worry my comment on your
LGPL -> GPL change. If there is some rationale behind your action,
please explain why you do this brute action at
    84cb8b61a39f0b26c17c6962ab38b61a1f1cd7d7

|  * Drop outdated copyright notice for /debian folder and replace by
|    GPL-2+ copyright entry in /debian/copyright.

(It may be legal but bad taste....  There were some consideration behind
original one and I think we should respect Tom's decision as much.  I
think we should add new ones name ... that is what was needed)

As for others, shlib-without-versioned-soname my be most important to
take care.

I think review on the validity of simbols file contents may be another
important thing to worry.
 debian/libjpeg-turbo-only.symbols
 debian/libjpeg-turbo8.symbols
 and associated code in debian/rules

Osamu