Your message dated Sat, 04 Nov 2017 16:49:41 +0000 with message-id <e1eb1dd-000fl1...@fasolo.debian.org> and subject line Bug#879984: fixed in libgcrypt20 1.7.9-2 has caused the Debian Bug report #879984, regarding libgcrypt20: copyright does not mention OCB patent license to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 879984: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=879984 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: libgcrypt20 Version: 1.7.9-1 Severity: serious libgcrypt implements OCB, which is patented[0]. The author, Phil Rogaway, provides three licenses. * The first license applies to wholly open-source implementations that do not contain any closed-source components. * The second license applies to non-military software implementations. * The third license applies only to OpenSSL. Only the first license applies here, since libgcrypt is not derived from OpenSSL and the second license violates the DFSG. Because libgcrypt is LGPL and may legally be linked to proprietary code, it must contain a copy of the first patent license, as the patent license imposes further restrictions on the way it can legally be used and distributed. As a consequence, these terms must be listed in the copyright file. Because Debian must avail itself of the first patent license, it is therefore obligatory that libgcrypt20 not link against any proprietary code directly or indirectly, and this should be prominently disclosed as it restricts the text of the LGPL. If it is not possible for practical purposes that libgcrypt not link to proprietary software (say, because libgcrypt20 is linked into Xorg and people might want to use a proprietary graphics driver), then OCB support will need to be removed. [0] http://web.cs.ucdavis.edu/~rogaway/ocb/license.htm -- System Information: Debian Release: buster/sid APT prefers unstable-debug APT policy: (500, 'unstable-debug'), (500, 'unstable'), (500, 'stable'), (1, 'experimental-debug'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.13.0-1-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages libgcrypt20 depends on: ii libc6 2.24-17 ii libgpg-error0 1.27-3 libgcrypt20 recommends no packages. Versions of packages libgcrypt20 suggests: pn rng-tools <none> -- no debconf information -- brian m. carlson / brian with sandals: Houston, Texas, US https://www.crustytoothpaste.net/~bmc | My opinion only OpenPGP: https://keybase.io/bk2204
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---Source: libgcrypt20 Source-Version: 1.7.9-2 We believe that the bug you reported is fixed in the latest version of libgcrypt20, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 879...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Andreas Metzler <ametz...@debian.org> (supplier of updated libgcrypt20 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 04 Nov 2017 16:37:16 +0100 Source: libgcrypt20 Binary: libgcrypt20-doc libgcrypt20-dev libgcrypt20 libgcrypt20-udeb libgcrypt11-dev libgcrypt-mingw-w64-dev Architecture: source Version: 1.7.9-2 Distribution: unstable Urgency: medium Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-ma...@lists.alioth.debian.org> Changed-By: Andreas Metzler <ametz...@debian.org> Closes: 879984 Description: libgcrypt11-dev - transitional libgcrypt11-dev package libgcrypt20-dev - LGPL Crypto library - development files libgcrypt20-doc - LGPL Crypto library - documentation libgcrypt20 - LGPL Crypto library - runtime library libgcrypt20-udeb - LGPL Crypto library - runtime library (udeb) libgcrypt-mingw-w64-dev - LGPL Crypto library - Windows development Changes: libgcrypt20 (1.7.9-2) unstable; urgency=medium . * Sync debian/copyright with upstream's LICENSES file, adding the OCB license 1. Closes: #879984 * [lintian] Drop trailing whitespace in control and changelog. * [lintian] Sync priorities with override file (extra -> optional). * [lintian] Fix typo in copyright file. Checksums-Sha1: 8b1a993a34d368332036d76ef08e2198d16e50e2 2920 libgcrypt20_1.7.9-2.dsc 13fa533431e5f54a9e1b2b7f0e86d0b0e0b00b6e 27780 libgcrypt20_1.7.9-2.debian.tar.xz Checksums-Sha256: d7eea44f3b643d04f24060dbdd3156c7aca34eb1ab567057a86f21e099ab7c60 2920 libgcrypt20_1.7.9-2.dsc 51f1706cda72646452349a68ebb71921473d0d6cf51573d117980d265c8d6381 27780 libgcrypt20_1.7.9-2.debian.tar.xz Files: 61cccd137bc8f5bc4060e575ec02a36b 2920 libs optional libgcrypt20_1.7.9-2.dsc bf67d4927248e667ec0675ee3f2d7f21 27780 libs optional libgcrypt20_1.7.9-2.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0uCSA5741Jbt9PpepU8BhUOCFIQFAln962MACgkQpU8BhUOC FIRmcw//dO23Jnti9CvBupkyiytcO2DhVPSR3xvX7qvIMduEEGF6LkI3UaQVph5I sySdYOohMHtxyxEhAHlbKHYtOovIgvcIPUHEaE1ya6AkrSt2P5XE68e9qdAqc9QE cKAJ1XMQe0BvxM+QrOBhvKSGz3pD6QvgWpDr62q0/d0AJTvrI0nDWJWmepqjCY6x hA1yTAe2HHhuUvBHihozQbT0yak7Hef1UnP1IuYl+H6vExB9ycuFFM1oP+f29iP5 Xj53hFV14K75oPRVb8Z8ZoPyGZS1xPG8WlD4wisqyRNp/xH0ctMc2JDOmV3h2rm/ u00WO1pSZQacPu+vanhDo96JjGxpWGyS36EAghuWw6c48y+vIyfirbFHAVGi4buW O47StQlwSHGDb9ARR+Cq3R2qtkKkzCb8hSNCirgdBkNXYm54apaLYLPvdGsxMZ0i eKHhvBk57i+ItufajUhSBugUGWYs/3PGGodY8DHe/zbt86l4AxhnaBT3XIow8n+g DcEBkuFS7YbkdRvsOvVRPBXzxtpfXzIgtT/KKDanzPrUj92W1JqrSwpa2NBUcGyA Lr/tP6/rMqSec3UA4CuYerhzgYWCDfYpf0qLYwHlKC2woEgWai+7s7wJ/DDrmrFq /fHY+6NrF0CtleD3BXRmpBsDRgcAT6Zr0PB6zPzeaVc7/Ogjhrk= =1WWB -----END PGP SIGNATURE-----
--- End Message ---
