Accepted cernlib 2004.11.04-3 (source)

Wed Apr 13 09:07:37 CDT 2005

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Origin: Debian/unstable
Format: 1.7
Date: Wed,  13 Apr 2005 13:40:41 +0100
Source: cernlib
Binary: libpacklib1, libeurodec1-dev, pawserv, cernlib-core-dev, libphtools1-dev, libmathlib1, libisajet758, libpaw1-dev, libgeant1, geant321-doc, libkuipx11-1, libcojets1, paw-common, dzedit, libgeant1-dev, libphotos202-dev, geant321-data, libisajet758-dev, cernlib-core, paw, libgraflib1-dev, libeurodec1, libherwig59, libkuipx11-1-dev, libpaw1, libphtools1, libcojets1-dev, cernlib-extras, paw++, cernlib-montecarlo, libkernlib1, libpdflib804, libphotos202, libgrafx11-1-dev, libpacklib1-dev, libgrafx11-1, libpdflib804-dev, kxterm, libmathlib1-dev, paw++-static, libkernlib1-dev, zftp, paw-static, libherwig59-dev, cernlib-base, kuipc, montecarlo-base, cernlib, libgraflib1, paw-demos, geant321
Architecture: source
Version: 2004.11.04-3
Distribution: breezy
Urgency: high
Maintainer: Kevin B. McCarty <kmccarty at princeton.edu>
Changed-By: Ubuntu Archive Auto-Sync <katie at jackass.ubuntu.com>
Description: 
 cernlib    - almost complete set of Debian Cernlib packages
Closes: 290394
Changes: 
 cernlib (2004.11.04-3) unstable; urgency=high
 .
   * Security patches to fix potentially dangerous uses of /tmp.
     [Patches 027 and 034 also fix some such problems, but did not need to
     be updated for this release; I mention them here for completeness.]
     - patch 004: improve gxint script to create predictable filename "GEANT$$"
                  in $HOME, not /tmp
     - patch 048: have various daemons log to /var/log, not /tmp
     - patch 049: fix kuesvr not to create predictable filename in /tmp
     - patch 050: have COMIS create predictably named files in a safe
                  subdirectory of /tmp created with mkdtemp()
     - patch 051: miscellaneous other /tmp-related fixes that don't affect
                  Debian directly; mainly in build infrastructure
     Some difficult-to-fix problems remain, but they do not affect the
     build process, programs, or libraries in Debian.
 .
   * debian/rules: Bump libpaw1 shlibs dependency to ">> 2004.11.04-2" since
     patch 050 adds a new public function "cstmpd_" to the library.
 .
   * debian/rules, debian/libpacklib1.{install,dirs}, debian/generic/Makefile:
     Install kuesvr into the libpacklib1 package now that it isn't a
     security hazard.
     - debian/generic/manpages/kuesvr.1, debian/NEWS: Add kuesvr man page.
       Note the API incompatibility in the kuesvr command-line flags
       resulting from patch 049.
     - debian/local/control/libpacklib1.control: As a result of this
       incompatibility, have libpacklib1 Conflict against older versions of
       paw{,++}-static that expect the original kuesvr API.  (Older versions
       of paw and paw++ are dynamically linked to libpacklib1, so they will
       have no trouble.)
     - patch 041: When HOST_EDITOR is "vi &", execute the editor with
       "x-terminal-emulator -e" for Debian instead of "xterm -e".
     - debian/local/control/libpacklib1.control: Therefore, Suggests
       "xterm | x-terminal-emulator".
 .
   * debian/generic/bin/cernlib:
     - Test for libblas-2.so and liblapack-2.so before libblas2.so and
       liblapack2.so, following the recent renaming of
       /etc/alternatives/lib{blas,lapack}2.so to lib{blas,lapack}-2.so in
       several packages.  Try plain libblas.so and liblapack.so last,
       to avoid mistakenly linking against libblas.so.3, etc.
     - Don't eat unknown arguments past the end of cernlib-specific flags;
       instead, output them directly before all other output (if they start
       with a hyphen "-") or inline as -l$argument (otherwise).  Mention
       this new behavior in the manpage, debian/generic/manpages/cernlib.1.
 .
   * debian/local/control/0base.control: Remove atlas2-dev from Build-
     Conflicts and add it to Build-Depends (as an alternative to each
     of blas-dev, lapack-dev).  Since the libblas.so.2 and liblapack.so.2
     libraries in atlas2-*-dev packages are supposedly ABI-compatible with
     those in blas and lapack packages, this should be perfectly OK.
     - debian/generic/Makefile: don't link pawX11.static with -llapack
       directly; use the "cernlib" script to detect the right lapack
       library automatically.
 .
   * patch 048, debian/rules, debian/pawserv.{cron.hourly,logrotate,postrm},
     debian/local/control/pawserv.control:
     Fix pawserv/zserv to write its logs to a sane place (/var/log/pawserv)
     with permissions 0700, add a cron.hourly script to concatenate them
     into /var/log/pawserv.log, include a logrotate.d config fragment, and
     have the pawserv package Suggest logrotate and Recommend cron.
 .
   * debian/generic/misc/cernlib.m4, debian/NEWS: New update of cernlib.m4
     Autoconf macros from Patrice Dumas <dumas at lmd.ens.fr>.  This version is
     slightly backwards-incompatible; for details, see debian/NEWS (in source)
     or /usr/share/doc/cernlib-base/NEWS.Debian (in installed packages).
 .
   * debian/local/control/cernlib-montecarlo.control: No longer depend on
     "libisajet758-dev | m68k-linux-gnu" since type-handling has stopped
     providing architecture virtual packages (cf. bug #274747).  Instead,
     Recommend libisajet758-dev so as not to be uninstallable on m68k.
 .
   * debian/generic/manpages/*, debian/*.{TODO,README.debian}: Update and
     touch up various documents slightly, including a note in gxint.1 about
     the change due to the update of patch 004.
 .
   * debian/*.overrides: Remove Lintian overrides for the warning
     description-synopsis-starts-with-a-capital-letter; it has been removed
     from Lintian due to too many false positives.
 .
   * debian/generic/README: Remove obsolete claim that compressed GIF
     support is disabled.
 .
   * debian/paw*.README.debian: Mention that making the suggested change to
     XF86Config-4 will cause Debconf not to update that file, and refer
     to the relevant X Strike Force FAQ entry.
 .
   * debian/generic/Makefile, debian/generic/patches/ifort.patch,
     debian/generic/patches/additions/config+linux.cf,
     debian/local/rules-help.txt: Add the "ifort" option to $DEB_BUILD_OPTIONS
     to compile with ifort/icc instead of g77/gcc.  Thanks to Marco Cammarata
     <marco.cammarata at esrf.fr> for trying this out.
 .
 cernlib (2004.11.04-2) unstable; urgency=low
 .
   * patch 015: Compile src/mathlib/gen/d/radmul.F at -O0 to work around a
     g77 optimization bug (closes: #290394).  Many thanks to
     Eduardo A. Menendez Proupin <emenendez at macul.ciencias.uchile.cl>
     for tracking this down.
 .
   * Tidying up for Sarge:
     - debian/generic/patches/additions/config+linux.cf: Comment out extra
       "ServerExtraDefines" definition.
     - debian/paw{,++}{,-static}.{overrides,dirs}, debian/rules: Add Lintian
       overrides for Lintian false alarms on these binary packages.
     - debian/local/control/*: Fix a few package descriptions that get a
       Lintian warning for description-synopsis-starts-with-a-capital-letter.
       Most of these are spurious but it would be too bothersome to add
       overrides for all of them.
     - debian/generic/manpages/cernlib.1: Explain why cernlib script links
       statically by default (viz., to preserve upstream behavior).
     - debian/*.doc-base: Change doc-base sections of documents from
       Apps/Programming to Apps/Science.
     - debian/copyright: Fix the copyright file so that the "above copyright
       notice" referred to in many of the exception licenses is included in
       the correct place.  Quote CERN's licensing of Cernlib under the GPL
       verbatim.  Remark upon where to find the original COPYRIGHT file for
       the Addison-Wesley copyrighted source code.
     - debian/copyright, debian/libpdflib804-dev.README.debian: Add a comment,
       just in case anyone gets worried, that the apparently non-free license
       of the file src/mclibs/pdf/doc/pdfdoc.dat (a.k.a. /usr/share/doc/lib-
       pdflib804-dev/pdfdoc.txt.gz) has been superseded by the GPL.
     - debian/*.README.debian: Add disclaimers that URLs for unofficial
       non-free Monte Carlo Debian packages (Ariadne, Pythia, etc.) may not
       last forever.
Files: 
 376fb6996722b256135b24d80f09e8bb 1507 science optional cernlib_2004.11.04-3.dsc
 410b84146fc86e40b388efe153f263e5 214013 science optional cernlib_2004.11.04-3.diff.gz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iQEVAwUBQl0TSQF4adwMEr3XAQLWAQf9HrOz5cvsqY0K7ENOrlAsEFBZ17m6kiJV
ZbIT+j/MdxJFptI+2YVtk6la0n+szLtZqaJgDwvNu+518CvIuirfD6rTRIv9nPJp
cV7pUn7c9wHrHJbF319jsJIx7weql443A3T41968onXV6Y1ZHWNZ3Jt/bWIQDaUQ
QG+lWVe3ePl7P5dWnyXng/liDwLoQctQzXZoJvWjnDtkYa30t1BHr/kS72PBUKqG
/aUz3BGqiH+kiK2MtBjVvfLXv+xzwvdY5/r25xll+Y2sp3QUMqMZFLYhUncb5Z3j
yuRWixhh/xR/rn8W9cCtj5AEoHXd8PXmVe29gwU1zj5vfoD0vXXSaQ==
=wbaN
-----END PGP SIGNATURE-----


Accepted:
cernlib_2004.11.04-3.diff.gz
  to pool/universe/c/cernlib/cernlib_2004.11.04-3.diff.gz
cernlib_2004.11.04-3.dsc
  to pool/universe/c/cernlib/cernlib_2004.11.04-3.dsc