vlc source promoted itself hours after demotion

[William Grant]

After I requested it in bug #206912, slangasek demoted vlc (source and binaries) to multiverse:

~~~~
2008-04-15 01:02:03 INFO Override Component to: 'multiverse'
2008-04-15 01:02:03 INFO 'vlc - 0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu2/multiverse/graphics' source overridden
[snip lots of binaries, the full log is in the other bug]
~~~~

As can be seen at https://launchpad.net/ubuntu/+source/vlc/+publishinghistory, this worked. The binaries were all correctly overridden as well. However, as can also been seen there, there was an upload some 11 hours later, which was automatically sent to universe. The subsequently produced hppa binaries ended up in universe (as they had failed to build previously, so weren't overridden), while the rest correctly went to multiverse.

So it would appear that the vlc source promoted itself, which has the potential to be a severe licensing problem. It is fortunate that the binaries didn't go with it.

I quoted the first two lines of the override log above due to some strangeness in the second line - the vlc source is said to be in multiverse, which it wasn't at that time. The binaries are reported correctly, and their overrides stuck.

[Celso Providelo (cprov)]

I've dig out when the initial fixes for bug 180218 were released and they were in production only on March 26th (1.2.3 release).

This was *before* the swallowed override in hardy:

{{{
2008-04-15 14:55:04 CEST Published Hardy release universe graphics 0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3
    * Published on 2008-04-15
2008-04-15 03:02:03 CEST Superseded Hardy release multiverse graphics 0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu2
    * Removed from disk on 2008-04-18.
    * Removal requested on 2008-04-18.
    * Superseded on 2008-04-15 by vlc - 0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3
    * Published on 2008-04-15
}}}

It indicates something still necessary to mitigate those issues. Let's continue the investigation.

[Celso Providelo (cprov)]

So, after some investigation, we can see in:

https://edge.launchpad.net/ubuntu/hardy/+queue?queue_state=3&queue_text=vlc&start=60

That the version 0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3 wasn't overridden correctly because it was already in UNAPPROVED (beta-freeze) queue when the override was done.

That makes this a dup of bug 180218.