[Bug 1499094] Re: Please replace electrum with 'dummy' package in the repositories for Trusty, Vivid

[Didier Roche]

Hey Thomas! Thanks for working on this and fixing those security issues.

I can't build any of your package though. Are you sure you really tested the package with your debdiff applied? I tested the vivid package.
First thing I spotted is that you python-electrum.install can't work:
+debian/bin/python-electrum /usr/bin

where the binary you want to install is debian/python-electrum, so
building the package will fail.

Secondly, you are installing this binary both in python-electrum and
electrum package. I guess you didn't try to install both packages on
your system as dpkg will fail due to same filename being installed in
different package (and so, you are going to create upgrade issues).
Please only ship it in the electrum package

However, even with those changes, there is still some build failure
error in dh_install due to creating debian/python-electrum directory.

So, in a nutshell, please test your patches by building with them and
installing them. ;) I'm changing the status (fix released for
wily/xenial due to package removal). I'm changing the trusty and vivid
status to incomplete, please revert them to New once you propose new
working patches.

On a final note, let's try to keep the diff minimal. Keep the old
debian/control.in dependencies, just change the descriptions.

Thanks!

** Changed in: electrum (Ubuntu Trusty)
       Status: New => Incomplete

** Changed in: electrum (Ubuntu Vivid)
       Status: New => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1499094

Title:
  Please replace electrum with 'dummy' package in the repositories for
  Trusty, Vivid

Status in electrum package in Ubuntu:
  Fix Released
Status in electrum source package in Trusty:
  Incomplete
Status in electrum source package in Vivid:
  Incomplete

Bug description:
  Related:
  https://bugs.launchpad.net/ubuntu/+source/electrum/+bug/1481033

  
  Request:
  Please apply a retroactive SRU that will replace the Electrum binaries and such with 'dummy' packages.  A related removal/blacklist request is linked above, and may be used as the supporting arguments for this request, as well as the prior precedent set by the Bitcoin source package blacklisting and retroactive 'dummyfication'.

  
  Precedent:
  There is prior precedent existing for such a retroactive 'nullification' of the package by replacing it with a dummy package within the 'bitcoin' source package.  Refer to https://bugs.launchpad.net/ubuntu/+source/bitcoin/+bug/1260602 for that precedent.  Similar precedent exists here, as future hard-forks in Bitcoin blockchains may, and very likely always will, make 'older' Electrum releases break.

  
  Implied Breakages with this SRU:
  * The 'electrum' binary installed by the binaries from the repository *will no longer work* on systems when this SRU goes out.
  * The 'python-electrum' binary installed by the binaries from the repository *will no longer work* on systems when this SRU goes out.

  
  Alternatives to the Ubuntu Repositories:
  * Upstream provides installation via either compiling from source tarballs from upstream, or via 'python pip'.  This will, of course, keep the package updated when individuals use 'pip' in accordance with Upstream recommendations and guidelines for the installation and/or compiling of the program.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/electrum/+bug/1499094/+subscriptions