This is the list of files known to be affected by this bug: xc/programs/Xserver/hw/xfree86/drivers/mga/mga_ucodexch xc/programs/Xserver/hw/xfree86/drivers/rendition/v10002dxcuc xc/programs/Xserver/hw/xfree86/drivers/rendition/v20002dxcuc xc/programs/Xserver/hw/xfree86/os-support/shared/drm/kernel/r128_ccexcc xc/programs/Xserver/hw/xfree86/os-support/shared/drm/kernel/radeon_cpxcc xc/programs/Xserver/hw/xfree86/os-support/shared/drm/kernel/mga_ucode.h
These files all contain binary executables (to run on graphics card chips) with no source code at all. Therefore they fail the DFSG's requirements. Luckily, none of these files are actually *used* in Debian's XFree86 build, so removing them from the .tar.gz of Debian's XFree86 source should be an easy and trivial solution to this bug for sarge. (Different copies of the same binaries are present and used in the kernel packages, but those are being addressed elsewhere.) I don't think, therefore, that this bug needs to be tagged "moreinfo" any longer...