Your message dated Mon, 25 Feb 2008 12:47:16 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#435209: fixed in labplot 1.6.0.1-1
has caused the Debian Bug report #435209,
regarding labplot: GPL and licensing clarifications needed
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [EMAIL PROTECTED]
immediately.)


-- 
435209: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=435209
Debian Bug Tracking System
Contact [EMAIL PROTECTED] with problems
--- Begin Message ---
Package: labplot
Version: 1.5.1.6-1
Severity: minor

Several clarifications seem to be needed with respect to the license 
seem to be needed in the copyright file.

1) First, the NetCDF license listed states:

        Further, UCAR requests that the user credit UCAR/Unidata in any 
publications that result from the use of this software or in any product 
that includes this software.

If this is read as an obligation, it would be a BSD-like advertising 
clause that would conflict with the GPL.   However, the upstream NetCDF 
authors have clarified the license to read 
(http://www.unidata.ucar.edu/software/netcdf/copyright.html):

        Further, UCAR requests that the user credit UCAR/Unidata in any 
publications that result from the use of this software or in any product 
that includes this software, although this is not an obligation.

I would recommend updating the netCDF code (and license statement) to 
a recent upstream version, to remove any doubt about the GPL 
compatibility.

2) Second, several files do not seem to be GPL-licensed, and their legal 
status is unclear.  

audiofile/extended.c is listed as "Copyright (C) 1988-1991 Apple 
Computer, Inc.  All rights reserved." with no further permissions.  This 
file looks dangerously non-free.

audiofile/g711.c is "a product of Sun Microsystems, Inc. and is provided 
for unrestricted use.  Users may copy or modify this source code without 
charge."  Unfortunately, this is quite a sloppy legal license, and does 
not explicitly grant the right to *sell* the software (required to be 
DFSG-free) and not just "use" it.

3) Although the copyright file lists the code as GPL version 2 only, I 
can find no such restriction in the source code.  I can't find a single 
file that lists the copyright as being version 2 only...the files that 
mention the GPL all list the copyright as being version 2 or later.  

The cephes/COPYING file lists version 2 only, but that seems to have 
been added by the Debian maintainers, since the authors' permission 
email (in the debian/copyright file) does not specify a particular 
version.

If the code is v2 or later, as opposed to v2-only, the debian/copyright 
file needs to say so.

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.16.33-vpsX (SMP w/1 CPU core)
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/bash


--- End Message ---
--- Begin Message ---
Source: labplot
Source-Version: 1.6.0.1-1

We believe that the bug you reported is fixed in the latest version of
labplot, which is due to be installed in the Debian FTP archive:

labplot_1.6.0.1-1.diff.gz
  to pool/main/l/labplot/labplot_1.6.0.1-1.diff.gz
labplot_1.6.0.1-1.dsc
  to pool/main/l/labplot/labplot_1.6.0.1-1.dsc
labplot_1.6.0.1-1_i386.deb
  to pool/main/l/labplot/labplot_1.6.0.1-1_i386.deb
labplot_1.6.0.1.orig.tar.gz
  to pool/main/l/labplot/labplot_1.6.0.1.orig.tar.gz



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Frank S. Thomas <[EMAIL PROTECTED]> (supplier of updated labplot package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Sun, 24 Feb 2008 01:29:56 +0100
Source: labplot
Binary: labplot
Architecture: source i386
Version: 1.6.0.1-1
Distribution: unstable
Urgency: low
Maintainer: Helen Faulkner <[EMAIL PROTECTED]>
Changed-By: Frank S. Thomas <[EMAIL PROTECTED]>
Description: 
 labplot    - data plotting and function analysis tool for KDE
Closes: 313971 409551 435209 458444
Changes: 
 labplot (1.6.0.1-1) unstable; urgency=low
 .
   * New upstream release (Closes: #458444).
     - Fixes mistakes in po/de.po, thanks to Jens Seidel (Closes: #313971).
     - Does not crash when deleting two graphs (Closes: #409551).
   * Rewrote debian/copyright in the machine-readable format that is outlined
     in http://wiki.debian.org/Proposals/CopyrightFormat and clarified some
     license issues (Closes: #435209).
   * debian/patches/:
     - Removed build-with-gcc4.3.patch and fix-autoconf-2.6-compatibility.patch,
       these have been incorporated upstream.
     - Readded use-pkg-config-instead-of-magick-config.patch which was added
       in 1.5.1-1 but got lost in 1.5.1.6-1.
     - Added use-debians-qwtplot3d-qt3.patch to modify configure.in in order to
       search for qwtplot3d-qt3 (Debian's Qt 3 flavour of QwtPlot3D) instead of
       qwtplot3d.
   * debian/rules:
     - Explicitly passed --enable-FEATURE to configure for all features labplot
       should be built with. Most of these correspond to a library development
       package in Build-Depends.
     - Removed "VTK_DIR=/usr" from the configure invocation. It is useless
       because the build-dependency on libvtk4-dev was removed in 1.5.0.5-1.
     - Include debian/debiandirs (if it exists) so that $(configkde) is not
       empty when running configure.
     - Call configure with the --build and --host options as suggested in the
       section "Calling GNU configure properly" in autotools-dev's
       README.Debian.
   * debian/control:
     - Added to Build-Depends: libjasper-dev (it was implicitly pulled in by
       libmagick9-dev, but configure checks for it), libhdf5-serial-dev (new
       feature in 1.6.0), libqwtplot3d-qt3-dev and liborigin-dev (these are
       required so that labplot does not use the included copies of these
       libraries), qhull-bin (in order to prevent labplot from shipping its
       own /usr/bin/qdelaunay).
     - Added Vcs-{Git,Browser} fields to the source stanza.
     - Added myself to Uploaders with Helen's kind permission. Thanks!
   * Do not build the included libraries in liborigin-20070926 and qwtplot3d
     (libLabPlotorigin.so.* and libLabPlotqwtplot3d.so.*), use the system
     libraries provided by the liborigin-dev and libqwtplot3d-qt3 packages
     instead.
   * Removed debian/labplot.manpages and debian/opj2dat.1 because labplot does
     not include /usr/bin/opj2dat anymore. This binary is now provided by the
     opj2dat package.
   * debian/override:
     - Removed the warning "binary-without-manpage" because labplot includes a
       manpage for LabPlot as well as for labplot.
     - Removed the "package-name-doesnt-match-sonames" warnings for
       libLabPlotorigin0 and libLabPlotqwtplot3d0 because these libraries are
       not included in this package anymore.
   * Bumped debhelper compat level from V5 to V6 since this is the current
     recommended level and raised the build dependency to "debhelper (>= 6)".
Files: 
 da8127415960211873aee437eb4606bd 1117 kde optional labplot_1.6.0.1-1.dsc
 50dd3033f35003d68d5a4e54336cd6c3 11903145 kde optional 
labplot_1.6.0.1.orig.tar.gz
 7490b6a6ad4031b9c5c9f3cbbae7ea52 11467 kde optional labplot_1.6.0.1-1.diff.gz
 8ea0a31ffeeee7632032329742642a15 6828726 kde optional 
labplot_1.6.0.1-1_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHwq5uft6HNdxCZCkRAkM8AJ9CX93YaePXEpz5lt9k1O0HcFGlXwCeOZyC
2E7TPH2bgBoNn3Dxd4CdEyQ=
=GBUQ
-----END PGP SIGNATURE-----



--- End Message ---

Reply via email to