Bug 18820

Summary:	atunes contains a prebuilt i586 .so (libJXGrabKey.so)
Product:	Mageia	Reporter:	Pascal Terjan <pterjan>
Component:	RPM Packages	Assignee:	David GEIGER <geiger.david68210>
Status:	RESOLVED FIXED	QA Contact:
Severity:	critical
Priority:	Normal
Version:	Cauldron
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:
Source RPM:	atunes	CVE:
Status comment:

Description Pascal Terjan 2016-06-29 22:50:56 CEST

First, this doesn't go well on arm.

Second, atunes is supposed to be GPLv2 so should be giving all the sources.

I guess it comes from https://sourceforge.net/projects/jxgrabkey/ which is LGPLv3, so we probably are allowed to distribute it, but this is just a guess, that .so can be anything.

We should either get rid of that .so (and package jxgrabkey) or get rid of atunes.

Comment 1 David GEIGER 2016-06-29 22:58:48 CEST

As atunes seems a quite dead now and since 2014-06-22, I'm in favor to remove it.

Comment 2 David GEIGER 2016-07-04 23:43:08 CEST

So atunes was removed, closing as fixed.

Status: NEW => RESOLVED
Resolution: (none) => FIXED