Your message dated Fri, 18 Nov 2016 15:33:45 +0000 with message-id <e1c7laf-000dic...@fasolo.debian.org> and subject line Bug#823100: fixed in ghostscript 9.20~dfsg-1~exp1 has caused the Debian Bug report #823100, regarding ghostscript: includes two files claimed to be under a non-free Unicode license to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 823100: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823100 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: ghostscript Version: 9.19~dfsg-1+b1 Severity: serious Justification: Policy 2.2.1 Hello, I noticed that two files included in the ghostscript source package are documented in the debian/copyright file as distributed under the terms of a non-free Unicode license. The two files are: Files: base/ConvertUTF.c base/ConvertUTF.h Copyright: 2001-2004, Unicode, Inc License: Unicode and the license text is claimed to be: License: Unicode This source code is provided as is by Unicode, Inc. No claims are made as to fitness for any particular purpose. No warranties of any kind are expressed or implied. The recipient agrees to determine applicability of information provided. If this file has been purchased on magnetic or optical media from Unicode, Inc., the sole remedy for any claim will be exchange of defective media within 90 days of receipt. . Limitations on Rights to Redistribute This Code . Unicode, Inc. hereby grants the right to freely use the information supplied in this file in the creation of products supporting the Unicode Standard, and to make copies of this file in any form for internal or external distribution as long as this notice remains attached. At the very least, this license does not grant any permission to modify the files (thus failing DFSG#3). Moreover, the license grant seems to attempt to restrict use to "products supporting the Unicode Standard" (thus failing DFSG#6). See also https://lists.debian.org/debian-legal/2015/12/msg00000.html where an FTP Assitant confirmed that files which restrict "use to only that of implementing a standard" are not fit for Debian main. Therefore, the two files under discussion appear to be non-free. However, this issue could possibly be easy to solve. If Unicode Inc has published new versions of the two files in more recent times, the updated versions should be under the current unicode.org public license, as explained in http://www.unicode.org/copyright.html#Exhibit1 Please check whether newer versions of those files are released in one of the Unicode web site areas mentioned in the cited Exhibit1. The newer versions could perhaps be used as replacements for the non-free ones. I hope this issue may be addressed soon. Thanks for your time! Bye.
--- End Message ---
--- Begin Message ---Source: ghostscript Source-Version: 9.20~dfsg-1~exp1 We believe that the bug you reported is fixed in the latest version of ghostscript, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 823...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Jonas Smedegaard <d...@jones.dk> (supplier of updated ghostscript package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 18 Nov 2016 16:07:47 +0100 Source: ghostscript Binary: ghostscript ghostscript-x ghostscript-doc libgs9 libgs9-common libgs-dev ghostscript-dbg Architecture: source amd64 all Version: 9.20~dfsg-1~exp1 Distribution: experimental Urgency: medium Maintainer: Debian Printing Team <debian-printing@lists.debian.org> Changed-By: Jonas Smedegaard <d...@jones.dk> Description: ghostscript - interpreter for the PostScript language and for PDF ghostscript-dbg - interpreter for the PostScript language and for PDF - Debug symbo ghostscript-doc - interpreter for the PostScript language and for PDF - Documentati ghostscript-x - interpreter for the PostScript language and for PDF - X11 support libgs-dev - interpreter for the PostScript language and for PDF - Development libgs9 - interpreter for the PostScript language and for PDF - Library libgs9-common - interpreter for the PostScript language and for PDF - common file Closes: 823100 Changes: ghostscript (9.20~dfsg-1~exp1) experimental; urgency=medium . [ upstream ] * New release. . [ Jonas Smedegaard ] * Avoid non-DFSG embedded code copy of ConvertUTF: + Avoid when repackaging. + Stop track ConvertUTF files in copyright file. + Add patches cherry-pricked upstream to improve Unicode handling in PDF files. Closes: Bug#823100. Thanks to Francesco Poli. * Update copyright info: + Tidy repackaging to only cover what is still shipped upstream. + Add Files and License sections for new file licensed as ISC. * Have git import-orig use merge-strategy replace. * Update patches: + Drop patches cherry-picked upstream and now applied. + Consistently apply cherry-picked upstream patches first. + Unfuzz patches. * Stop build static library (seemingly no longer supported with upstream makefiles). * Update symbols file (92 missing). Checksums-Sha1: 030bbba2037e6de6b45e522291be5ee3a5c0c571 2851 ghostscript_9.20~dfsg-1~exp1.dsc 9489bf12392539b5ef063636419ea7248dbed423 24642220 ghostscript_9.20~dfsg.orig.tar.gz 001917e8523274ddfe322cdadf177b7e992e53ab 109620 ghostscript_9.20~dfsg-1~exp1.debian.tar.xz c57c6bd97844909e8298af6f3feed52c39e8ba55 11881250 ghostscript-dbg_9.20~dfsg-1~exp1_amd64.deb 460410f651440b34b4d365e71d8cd723a2a647b3 5630086 ghostscript-doc_9.20~dfsg-1~exp1_all.deb 037203771ed78a38fe94fe9156a8ca216214eff8 90006 ghostscript-x_9.20~dfsg-1~exp1_amd64.deb 21a533243cc9f9419a93f62587262d055aef07c0 11804 ghostscript_9.20~dfsg-1~exp1_amd64.buildinfo e69e2aa918fe14dccd02301124b5abc814b3d0dd 96826 ghostscript_9.20~dfsg-1~exp1_amd64.deb e9e2869a94f79ba369d6f5a66f903e8f7b6f8827 72254 libgs-dev_9.20~dfsg-1~exp1_amd64.deb 5287f9150b80186992e09557d11d8ee5ac48cf37 5159390 libgs9-common_9.20~dfsg-1~exp1_all.deb af3438abfd80f1f3729ce82ab8555a01f1d4ae7e 2065858 libgs9_9.20~dfsg-1~exp1_amd64.deb Checksums-Sha256: 6ffa52c98e73ce421475c3dcf2e47dbccc8ed6c35f33c4ae60c9550c047597e6 2851 ghostscript_9.20~dfsg-1~exp1.dsc 4b1cc33e4add4b5c62304a041896a176cf69e2a3702ca2ac3ee06b168787f911 24642220 ghostscript_9.20~dfsg.orig.tar.gz ddfdc1a41574609b6221ebbddfa88fcdc0fdd42823fff0b3c5594cd338fdbfb8 109620 ghostscript_9.20~dfsg-1~exp1.debian.tar.xz d0af2b1852d85cbe0521e325784055593c765e83a602d09005cdceffb925607e 11881250 ghostscript-dbg_9.20~dfsg-1~exp1_amd64.deb c4d44274351104da8503d9ac9b044d2b5b17d2ef16e9dbc3b89befcdb6a6a751 5630086 ghostscript-doc_9.20~dfsg-1~exp1_all.deb a463787015ddc5b122ae0cd3506c9b2f27d06c62e7c6f77c6902af018fe9156b 90006 ghostscript-x_9.20~dfsg-1~exp1_amd64.deb 6d3cec21195416172bdf966e69c8a7e0dc601abcbae6b5e235bebb45535c9e0c 11804 ghostscript_9.20~dfsg-1~exp1_amd64.buildinfo 5703f6dec68c5e4e886ddbfc07ee074af3b008876db1c5d11152e2514c8a515e 96826 ghostscript_9.20~dfsg-1~exp1_amd64.deb 21c233235edb4272d9908d74e41aadc54dc67b4a73089aee600efa0af48fa49c 72254 libgs-dev_9.20~dfsg-1~exp1_amd64.deb 1e15e521416fd525c0825b834b6133210a21a714109da9e2a5ce0cc02f084718 5159390 libgs9-common_9.20~dfsg-1~exp1_all.deb b9ba623d0a2c396d56eeebe350f60b7404f4c1ab6251f3eb6d80150427c23287 2065858 libgs9_9.20~dfsg-1~exp1_amd64.deb Files: bd7af6cd2431bc4a44062c5eb7836bab 2851 text optional ghostscript_9.20~dfsg-1~exp1.dsc d5fdc5f7b233c68d30d42a782535bdc0 24642220 text optional ghostscript_9.20~dfsg.orig.tar.gz affaaa464282e922355b6e883e796af3 109620 text optional ghostscript_9.20~dfsg-1~exp1.debian.tar.xz a74ba437ff13c90ee7ccd73149faf149 11881250 debug extra ghostscript-dbg_9.20~dfsg-1~exp1_amd64.deb a75ae2a58dff9ed6ba6ecdd7402d6298 5630086 doc optional ghostscript-doc_9.20~dfsg-1~exp1_all.deb 963252dcd67455c8925f15958d1234b1 90006 text optional ghostscript-x_9.20~dfsg-1~exp1_amd64.deb 3d9dea0820fdc855592a6e4ada3f3799 11804 text optional ghostscript_9.20~dfsg-1~exp1_amd64.buildinfo bc03802f6b0f49402ee0ba69a630d26d 96826 text optional ghostscript_9.20~dfsg-1~exp1_amd64.deb 2ca58a7de3b6009b68e88c83f704cb35 72254 libdevel optional libgs-dev_9.20~dfsg-1~exp1_amd64.deb 50cf41a670c9d9bb3f3c42e388777363 5159390 libs optional libgs9-common_9.20~dfsg-1~exp1_all.deb 13bffabeca9a0b83751ea5e3e20c0653 2065858 libs optional libgs9_9.20~dfsg-1~exp1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIcBAEBCAAGBQJYLx22AAoJECx8MUbBoAEhmjAQAIwFXz7wpRkTbLzkoMWeJRWS KnnVNA6M6eSx0bBoiPok9Vd5emZerOSFIg557IyaGxPrlXEi9Eqe8pCDh/gUanH8 4gfmVvYE02q5ZfB1mT6pSqOkAChR4xFp34z2NZKF/063Ix4KXIsomyMVS8geXWq6 zAgCjgZSK449AfGQz7wTzNNRa+YRozzOzXaZcqGby7cjVPi5YVSOW/OUzTKadB3w NUTb7Kl/vinbgOilJhrLiHDmkcw0sCUE+s+LPQkQNVu/OcFu5bGHGlg3hibPDX2z eYaJiPhLXYyKJa5asv2KLQjTepS9InZ7pKO8Z1QBdZ/AX1/H0U1smRy2aMt1dUZ+ Pp12A1tB5mY0hAE/kDivqCdrezZnJY5upoXoR2CJroa1qHDHx70YDkwfbv9fWzm2 XthYIyg4TcBUaSgTnX7GLMKm9NFoeUfYmHY6Jq1VuNWQNhAjnHrcJ0n6ux2DnKNt YX9ramSPPT9MZB3ggwmdXImHEGl12QFAhsWjvzNDxc4suB+ry68iZS/N4B1iFvCa ESmIc4egvAUMYIjaHCQPAA0eOu3hvespPQ6Hy/sqPs/f7j0Itx1mdoZx2c+3L/GD 2/eiQGvWDJGF9bUZHkzf+XqKfRLHJUUqSIi6C8yTdkMB7JijYiMFRIzTi0WBdpo/ AwwKGRN/uLNb0x4+k8D0 =3bxl -----END PGP SIGNATURE-----
--- End Message ---
