Re: Source file audit - 2013-09-30

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 10/03/2013 03:35 PM, Kevin Fenzi wrote:
Here's attached another run of my sources/patches url checker.
Please fix any packages you are responsible for in rawhide, and other
branches as other changes permit.

Lines in the output are of three forms:

- BADURL:base-file-name:$PACKAGENAME

This means that the URI provided in the Source(s) line didn't result in
a download of the source. This could be any of: URL changed, version
changed and URL wasn't updated, Site is down, Site is gone, etc.
Also there are a number of packages with incorrect sourceforge links.
(BTW, there are still some packages with ftp://people.redhat.com/
URLs).

- BADSOURCE:$SOURCENAME:$PACKAGENAME

This means that the source was downloaded ok from the upstream site,
but doesn't match the md5sum given in the sources file.
This could be due to needing to strip out content that fedora cannot
ship (but in that case you shouldn't have the full URI in the Source
line). Or upstream following poor release practices and updating
without changing their release.

- BAD_CVS_SOURCE:$SOURCENAME:$PACKAGENAME

This means that the file was downloaded from the URI given, and the
md5sum did not match the file thats present in git (not the lookaside).
This might be due to timestamps, or any of the above reasons.

kevin
--

Thanks!

orion:BADURL:Office%20Open%20XML%201st%20edition%20Part%204%20(PDF).zip:apache-poi

False positive?  This works for me.

orion:BADSOURCE:gdl-0.9.3.tar.gz:gdl

Now at 0.9.4, so hopefully okay.

orion:BADSOURCE:GE2011.11p1.tar.gz:gridengine
orion:BAD_CVS_SOURCE:libcore.c:gridengine

Fixed.

orion:BADURL:hdf5_1.8.10-patch1-1.debian.tar.gz:hdf5

Updated.  Hmm, didn't realize I would need to keep updating this...

orion:BADURL:kdesvn-1.6.0.tar.bz2:kdesvn

They say they have moved into kde proper, but I can't find a tarball there.

orion:BADURL:maven-ant-tasks-2.1.3-src.zip:maven-ant-tasks

New url

orion:BADURL:mayavi-4.3.0-f8f2c4016cbf9172b0a3a3c132dec7539e9e51c9.tar.gz:Mayavi

Made explicit that this is a git snapshot.

orion:BADURL:mod_xsendfile-0.12.tar.bz2:mod_xsendfile

Worked for me.

Getting https://tn123.org/mod_xsendfile/mod_xsendfile-0.12.tar.bz2 to ./mod_xsendfile-0.12.tar.bz2 % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 9345 100 9345 0 0 7419 0 0:00:01 0:00:01 --:--:-- 7416

orion:BADURL:oct2spec-1.0.1.tar.gz:oct2spec

Hmm, looks like I haven't kept up with fedorahosted.org changes.

orion:BADURL:jukka-pcfi-bd245c9.tar.gz:pcfi
Works for me
orion:BAD_CVS_SOURCE:License:pcfi
Looks like this disappeared.

orion:BADURL:plplot-5.9.9-svn12530.tar.xz:plplot

Updated to new 5.9.10 release

orion:BADURL:car_2.0-16.tar.gz:R-car

Upstream doesn't keep around old tarballs (yay!).  Updated to 2.0-19.

orion:BADURL:lmtest_0.9-30.tar.gz:R-lmtest

Same - 0.9-32

orion:BADURL:multcomp_1.2-17.tar.gz:R-multcomp

Same - 1.3-0

orion:BADURL:mvtnorm_0.9-9994.tar.gz:R-mvtnorm

Same - 0.9-9996

orion:BADURL:zoo_1.7-9.tar.gz:R-zoo

Same - 1.7-10

I added these to upstream release monitoring to help in the future.

--
Orion Poplawski
Technical Manager                     303-415-9701 x222
NWRA, Boulder/CoRA Office             FAX: 303-415-9702
3380 Mitchell Lane                       orion@xxxxxxxx
Boulder, CO 80301                   http://www.nwra.com
--
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct





[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux