Source: psi-plus
Severity: serious
Justification: Policy 2.2.1, Policy 12.5


There are many files which are LGPL-2.1+ and many files which are GPL2+, your
debian/copyight is not accurate about this saying only that the software is
LGPL-2+ and pointing to GPL instead of the LGPL

--

I noticed that many of the icons in in the iconsets-psi-plus directory appear
to be taken from non-free from various websites.  For example, the icondef.xml
file inside iconsets-psi-plus/affiliations/vista-halloween-affiliations.jisp
reads:

  Based on Vista halloween Icons by Icons Land.

This appears to be 
http://icons-land.com/vista-style-halloween-pumpkin-emoticons.php
The icons look to be identical copies which have been resized. 

Other icon sets appear to be creative commons licensed, for example,
smileys-affiliations/icondef.xml refers to http://p.yusukekamiyamane.com/ as
the source, and this site is claiming the icons to be under creative commons  
which is not mentioned in debian/copyright

I worry about the lack of a license for the icons which just claim to have been
found on iconfinder.com, as that site constains many non-free icons.

iconsets-psi-plus/emoticons/Android.jisp contains icons from the android 
project which is apache licensed, but this license isn't mentioned in 
debian/copyright

iconsets-psi-plus/emoticons/kolobok* is non-free.  There is a copyright file 
inside the .jisp files which is clearly non-free, and is also not included in 
debian/copyright

At this point I stopped looking at licenses of the iconsets.  It is quite clear 
that many of them are taking from non-free sources.  Some might be 
redistributable and free, but with licenses not mentioned in debian/copyright.

---

iris/src/jdns is MIT licensed, but this isn't mentioned in debian/copyright

---

src/tools/crash/crash_sigsev* contains a license not mentioned in 
debian/copyright

---

third-party/qca/qca/src/botantools contains multiple licenses not mentioned in
debian/copyright

---

I stop at this point.   I didn't fully audit the source code, but it is clearly 
needed.

-- System Information:
Debian Release: 6.0
  APT prefers unstable
  APT policy: (600, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to