Package: src:meshlab Version: 2020.02+git200217-1 Severity: serious Justification: Policy 2.3 Tags: pending Owner: ryan.pav...@gmail.com
Dear Maintainer, The recently uploaded 2020.02+git200217-1 package has some DFSG violations - some of which are file-exclusions that got lost in the new package, while others are newly found. The "newly found" one I'll consider key for this bug is use of GPL-incompatible source (ISC license with a "do not sell it" clause added) in a GPL package: three files in the "filter_screened_poisson" plugin. I have forwarded this particular issue upstream since it affects their binaries as well (they might be essentially not redistributable): <https://github.com/cnr-isti-vclab/meshlab/issues/583> Subsequently I fixed that by removing the files in question and applying modifications based on another, compatible source (the issue is in a vendored project's vendored project, neither of which are packaged in Debian or intended for anything other than standalone usage or source integration by upstreams.) This patch was applied upstream. I have inspected the source and restored the list of "Files-Excluded" in debian/copyright (including all the previously-listed files that their exclusion is still applicable, and adding additional new files that should be excluded for DFSG or source-missing reasons), and added a script that can generate the dfsg-cleaned repacked upstream tarball. (They're using Git with a submodule). My repacked version, which removes problematic files and patches a number of issues (including a version of the patch applied upstream to fix the filter_screened_poisson filter) is ready for review and uploaded to https://mentors.debian.net/package/meshlab . The source is up at https://salsa.debian.org/rpavlik-guest/meshlab - I have not pushed it to the science team repo out of courtesy since it hasn't been reviewed yet. However, I think it's ready to go. (The system information below reflects my installation of my own package on Buster, but I have set the version entry in the header correctly.) Ryan -- System Information: Debian Release: 10.3 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable-debug'), (500, 'stable'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 5.4.0-0.bpo.3-amd64 (SMP w/16 CPU cores) Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8), LANGUAGE=en_US.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages meshlab depends on: ii lib3ds-1-3 1.3.0-9+b1 ii libc6 2.28-10 ii libgcc1 1:8.3.0-6 ii libglew2.1 2.1.0-4 ii libglu1-mesa [libglu1] 9.0.0-2.1+b3 ii libglx0 1.1.0-1 ii libgmp10 2:6.1.2+dfsg-4 ii libgomp1 8.3.0-6 ii libmuparser2v5 2.2.6.1+dfsg-1 ii libopenctm1 1.0.3+dfsg1-2+b1 ii libopengl0 1.1.0-1 ii libqhull7 2015.2-4 ii libqt5core5a 5.11.3+dfsg1-1+deb10u3 ii libqt5gui5 5.11.3+dfsg1-1+deb10u3 ii libqt5network5 5.11.3+dfsg1-1+deb10u3 ii libqt5opengl5 5.11.3+dfsg1-1+deb10u3 ii libqt5script5 5.11.3+dfsg-3 ii libqt5widgets5 5.11.3+dfsg1-1+deb10u3 ii libqt5xml5 5.11.3+dfsg1-1+deb10u3 ii libqt5xmlpatterns5 5.11.3-2 ii libstdc++6 8.3.0-6 Versions of packages meshlab recommends: pn chemical-mime-data <none> meshlab suggests no packages. -- no debconf information