Bug#658326: [pkg-bacula-devel] Bug#658326: marked as done (bacula: sha implimentation is non-free)
On Sat, 16 Jun 2012, 06:38:32 EST, Luca Capello wrote: posting mobile, hopefully i didnt trim anything vital out. > On Fri, 15 Jun 2012 14:06:52 +0200, Karl Goetz wrote: > > On Wed, 02 May 2012 15:16:36 +0200 > > Luca Capello wrote: > fixed in squeeze-proposed-updates with the packages at: > = > Just to be clear about upstream reply: > > <http://bugs.bacula.org/view.php?id=1869#c6325> > > kern (administrator) 2012-05-24 07:25 > > This means that Debian (and any derivative who wants to be DFSG-free) > should carry the modification. Thanks for your extensive reply. Kk
Bug#658326: [pkg-bacula-devel] Bug#658326: marked as done (bacula: sha implimentation is non-free)
On Wed, 02 May 2012 15:16:36 +0200 Luca Capello wrote: Sorry I missed this entire discussion; I forgot about the bug entirely until I saw the close email :/ > Hi there! > > On Mon, 30 Apr 2012 11:21:51 +0200, Debian Bug Tracking System wrote: > > Your message dated Mon, 30 Apr 2012 09:17:34 + > > with message-id > > and subject line Bug#658326: fixed in bacula 5.0.3+dfsg-0.1 > > has caused the Debian Bug report #658326, > > regarding bacula: sha implimentation is non-free > > to be marked as done. > 2) Have you seen that Karl (the original submitter) specifically > talked about stable and oldstable? The problem should be fixed there > as well, but the first question above must be addressed first. > >Karl, given that the latest upstream sources still contain the >incriminated files, have you already brought this problem up to the >upstream authors? > > <http://www.bacula.org/git/cgit.cgi/bacula/tree/bacula/src/lib/sha1.c> > <http://www.bacula.org/git/cgit.cgi/bacula/tree/bacula/src/lib/sha1.h> As you noted later (by filing a bug of your own) I had not done this - apologies. > Subject: Re: [pkg-bacula-devel] Bug#658326: patch for switch to > openssl SHA1 implementation > On Thu, 17 May 2012 18:05:49 +0200, Luca Capello wrote: > > On Mon, 14 May 2012 22:43:12 +0200, Alexander Golovko wrote: > >> Ok, i add it into master branch > >> <http://anonscm.debian.org/gitweb/?p=pkg-bacula/bacula.git;a=commitdiff;h=6c562cfdaffd730c796518233f0d97da08a3891b> > >> > > > > I am going to upload a fixed package this weekend. > > Upstream sources re-packaged: > > > <http://anonscm.debian.org/gitweb/?p=pkg-bacula/bacula.git;a=commit;h=47fbab2da0062f2d4df087496220d969dd755d7b> > > Thx, bye, > Gismo / Luca Thanks everyone for your work on this, sorry I didn't take part in the discussion last month. thanks, kk -- Karl Goetz, (Kamping_Kaiser / VK7FOSS) http://www.kgoetz.id.au No, I won't join your social networking group *** I've changed GPG key to 6C097260 *** signature.asc Description: PGP signature
Bug#645807: severity of 645807 is serious
On Sat, 3 Mar 2012 14:50:52 +0100 Cyril Brulebois wrote: Hi kibi, > Karl Goetz (25/01/2012): > > #This really deserves a higher severity as a potential dfsg > > violation. severity 645807 serious > > thanks > > Basic research like checking debian/copyright really was too hard? You are right, and I apologise. I had been informed of this by someone else, but I hadn't got around to lowering/closing this bug (again, my fault). I did look at all the files shipped upstream, didn't think to check d/copyright *sigh*. please close with impunity! thanks, kk -- Karl Goetz, (Kamping_Kaiser / VK7FOSS) http://www.kgoetz.id.au No, I won't join your social networking group signature.asc Description: PGP signature
Bug#658326: bacula: sha implimentation is non-free
Package: bacula Severity: serious Justification: DFSG violation User: gnewsense-...@nongnu.org Usertags: gnewsense libreplanet Hi, The sha1 implimentation shipped in stable and oldstable appears to be taken directly from the RFC, with dfsg incompatible licence statements. The affected files are src/lib/sha1.{h,c} thanks, kk -- System Information: Debian Release: 6.0.3 APT prefers stable APT policy: (990, 'stable') Architecture: i386 (i686) Kernel: Linux 2.6.32-5-686-bigmem (SMP w/2 CPU cores) Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#657244: batik bundles a non free colour profile in pdf-transcoder.jar
On Wed, 25 Jan 2012 08:57:24 +0100 Vincent Fourmond wrote: > On Tue, Jan 24, 2012 at 11:54 PM, Karl Goetz > wrote: > > >From [1], it seems the pdf-transcoder.jar in batik contains a > > >colour > > profile with a crazy licence. > > "...permission to use, copy and distribute this file for any > > purpose is hereby granted without fee, provided that the file is > > not changed including the HP copyright notice tag, ... " > > > > The file will need to be removed from the jar, or the jar (and pdf > > support) removed from batik :/ > > Actually, it's more annoying than this. As far as I can tell, batik > doesn't use this binary jar (and it should have been stripped from the > debian source ages ago). Unfortunately, the jar comes from fop, and > the incriminated file is present in fop source, which makes it > unsuitable for main... Thanks for tracking down the real source of the problem! kk -- Karl Goetz, (Kamping_Kaiser / VK7FOSS) http://www.kgoetz.id.au No, I won't join your social networking group signature.asc Description: PGP signature
Bug#657245: blender: possible dfsg violation in release/windows/ subdirectory
Package: blender Severity: serious Justification: fails dfsg (disallows commercial distribution) User: gnewsense-...@nongnu.org Usertags: gnewsense libreplanet Hi, Someone has pointed out [1] that blender may have a dfsg violation in the release/windows subtree. In release/windows/ installer/02.copyright.txt and release/windows/publ_installer/02.copyright.txt it contains text detailing various restrictions in relation to "The software" [1] https://savannah.nongnu.org/bugs/?34590 If you disagree this particular bunding is a problem, feel free to downgrade this report, but the licence doesn't specify if it applies only to binaries or not. Also to note, it only affects stable, all recent releases have this problem resolved. thanks, kk -- System Information: Debian Release: 6.0.3 APT prefers stable APT policy: (990, 'stable') Architecture: i386 (i686) Kernel: Linux 2.6.32-5-686-bigmem (SMP w/2 CPU cores) Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash -- Karl Goetz, (Kamping_Kaiser / VK7FOSS) http://www.kgoetz.id.au No, I won't join your social networking group signature.asc Description: PGP signature
Bug#657244: batik bundles a non free colour profile in pdf-transcoder.jar
Package: batik Severity: serious Justification: may not be distributed without fee if modified User: gnewsense-...@nongnu.org Usertags: gnewsense libreplanet Hi, >From [1], it seems the pdf-transcoder.jar in batik contains a colour profile with a crazy licence. "...permission to use, copy and distribute this file for any purpose is hereby granted without fee, provided that the file is not changed including the HP copyright notice tag, ... " The file will need to be removed from the jar, or the jar (and pdf support) removed from batik :/ [1] https://savannah.nongnu.org/bugs/?34579 thanks, kk -- System Information: Debian Release: 6.0.3 APT prefers stable APT policy: (990, 'stable') Architecture: i386 (i686) Kernel: Linux 2.6.32-5-686-bigmem (SMP w/2 CPU cores) Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash -- Karl Goetz, (Kamping_Kaiser / VK7FOSS) http://www.kgoetz.id.au No, I won't join your social networking group signature.asc Description: PGP signature
Bug#618876: May contain non-free data
Package: screenlets Version: 0.1.2-7 Severity: serious Justification: fails dfsg User: k...@kgoetz.id.au Usertags: libreplanet Usertags: gns Hi all, To the best of my knowledge, Creative Commons Attribution-Noncommercial-Share Alike licence is not a dfsg compliant licence. http://wiki.debian.org/DFSGLicenses#CreativeCommonsAttributionShare-Alike.28CC-BY-SA.29v3.0 thanks, kk -- Karl Goetz, (Kamping_Kaiser / VK5FOSS) Debian contributor / gNewSense Maintainer http://www.kgoetz.id.au No, I won't join your social networking group signature.asc Description: PGP signature
Bug#607598: visualboyadvance: 2xSaImmx.asm only allows for *non commercial* use
On Sun, 2 Jan 2011 09:36:08 +1030 Karl Goetz wrote: > On Tue, 28 Dec 2010 20:28:41 +0100 > Julien Cristau wrote: > > > On Mon, Dec 20, 2010 at 13:38:58 +1030, Karl Goetz wrote: > > > > visualboyadvance in debian contains a file which lacks commercial > > > distribution rights [1]. Since this isn't granted by default, we > > > I guess worst case we can drop this file and drop the optimisation > > on i386 by building with --without-mmx. > > This package[1] builds and runs, but I've not tested that games run > inside it. Hi, I've tested with a pair of roms downloaded off the 'net and it appears to be running ok. I have a c2d laptop though, so i have plenty of CPU time to throw at it. Hopefully someone else can test this and get back with how it performs on a slower system too. thanks, kk > There are a few known issues with it (eg, I'm not sure if the > versioning is correct), but hopefully its more or less there. > > thanks, > kk > > [1] > http://mentors.debian.net/cgi-bin/sponsor-pkglist?action=details;package=visualboyadvance > -- Karl Goetz, (Kamping_Kaiser / VK5FOSS) Debian contributor / gNewSense Maintainer http://www.kgoetz.id.au No, I won't join your social networking group signature.asc Description: PGP signature
Bug#607598: visualboyadvance: 2xSaImmx.asm only allows for *non commercial* use
On Tue, 28 Dec 2010 20:28:41 +0100 Julien Cristau wrote: > On Mon, Dec 20, 2010 at 13:38:58 +1030, Karl Goetz wrote: > > visualboyadvance in debian contains a file which lacks commercial > > distribution rights [1]. Since this isn't granted by default, we > I guess worst case we can drop this file and drop the optimisation on > i386 by building with --without-mmx. This package[1] builds and runs, but I've not tested that games run inside it. There are a few known issues with it (eg, I'm not sure if the versioning is correct), but hopefully its more or less there. thanks, kk [1] http://mentors.debian.net/cgi-bin/sponsor-pkglist?action=details;package=visualboyadvance -- Karl Goetz, (Kamping_Kaiser / VK5FOSS) Debian contributor / gNewSense Maintainer http://www.kgoetz.id.au No, I won't join your social networking group signature.asc Description: PGP signature
Bug#607598: visualboyadvance: 2xSaImmx.asm only allows for *non commercial* use
On Tue, 28 Dec 2010 20:28:41 +0100 Julien Cristau wrote: > On Mon, Dec 20, 2010 at 13:38:58 +1030, Karl Goetz wrote: > > > Hi, > > visualboyadvance in debian contains a file which lacks commercial > > distribution rights [1]. Since this isn't granted by default, we > > need a new licence or the file removed (or the package moved into > > non-free, but that seems a bit extreme). > > > Did you try contacting upstream, or the author of this file? I've just got around to filing the bug. https://sourceforge.net/tracker/?func=detail&aid=3148468&group_id=63889&atid=505529 > I guess worst case we can drop this file and drop the optimisation on > i386 by building with --without-mmx. I've built a test package which appears to be building without the optomisation. I'll keep you updated. kk -- Karl Goetz, (Kamping_Kaiser / VK5FOSS) Debian contributor / gNewSense Maintainer http://www.kgoetz.id.au No, I won't join your social networking group signature.asc Description: PGP signature
Bug#607598: visualboyadvance: 2xSaImmx.asm only allows for *non commercial* use
On Tue, 28 Dec 2010 20:28:41 +0100 Julien Cristau wrote: > On Mon, Dec 20, 2010 at 13:38:58 +1030, Karl Goetz wrote: > > visualboyadvance in debian contains a file which lacks commercial > > distribution rights [1]. Since this isn't granted by default, we > > need a new licence or the file removed (or the package moved into > > non-free, but that seems a bit extreme). > > > Did you try contacting upstream, or the author of this file? > I guess worst case we can drop this file and drop the optimisation on > i386 by building with --without-mmx. > > Cheers, > Julien Hi Julian, I've not contacted upstream, but i am working on a new package. kk -- Karl Goetz, (Kamping_Kaiser / VK5FOSS) Debian contributor / gNewSense Maintainer http://www.kgoetz.id.au No, I won't join your social networking group signature.asc Description: PGP signature
Bug#607598: visualboyadvance: 2xSaImmx.asm only allows for *non commercial* use
Package: visualboyadvance Severity: serious Tags: upstream Justification: non commercial licence, not allowed in main User: k...@kgoetz.id.au Usertags: libreplanet Hi, visualboyadvance in debian contains a file which lacks commercial distribution rights [1]. Since this isn't granted by default, we need a new licence or the file removed (or the package moved into non-free, but that seems a bit extreme). This is different to 441978, which was about this licence missing from the debian/copyright file. [1] http://git.debian.org/?p=pkg-games/visualboyadvance.git;a=blob;f=src/i386/2xSaImmx.asm;h=e0f2e268b604fce4b40d75d68e93ab5f9adfe339;hb=HEAD thanks, kk -- System Information: Debian Release: squeeze/sid APT prefers testing APT policy: (500, 'testing') Architecture: i386 (i686) Kernel: Linux 2.6.32-5-686-bigmem (SMP w/2 CPU cores) Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#600338: May contain non-free data
Package: libitext1-java Version: all Severity: serious Justification: Unmodifiable/distributable files User: k...@kgoetz.id.au Usertags: libreplanet Per a redhat bug report [1] and a related debian bug [2], itext has a number of non dfsg files. /* * Copyright 1998 by Sun Microsystems, Inc., * 901 San Antonio Road, Palo Alto, California, 94303, U.S.A. * All rights reserved. * * This software is the confidential and proprietary information * of Sun Microsystems, Inc. ("Confidential Information"). You * shall not disclose such Confidential Information and shall use * it only in accordance with the terms of the license agreement * you entered into with Sun. */ [1] https://bugzilla.redhat.com/show_bug.cgi?id=236309 [2] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519466 Please make a dfsg free version of the package. thanks, kk -- Karl Goetz, (Kamping_Kaiser / VK5FOSS) Debian contributor / gNewSense Maintainer http://www.kgoetz.id.au No, I won't join your social networking group signature.asc Description: PGP signature
Bug#587002: FTBFS on mips{,el}: /usr/bin/ld: non-dynamic relocations refer to dynamic symbol std::cerr@@GLIBCXX_3.4
Hi, I just tried to rebuild boson 0.13-6 from sid and i see this both with -g and without. I tried building on a mipsel system - yeeloong - using a fresh sid chroot. Adding export CC=gcc-4.3 export CXX=g++-4.3 into debian/rules results in the build finishing. The point where it was failing before was ~11%. kk -- Karl Goetz, (Kamping_Kaiser / VK5FOSS) Debian contributor / gNewSense Maintainer http://www.kgoetz.id.au No, I won't join your social networking group signature.asc Description: PGP signature
Bug#562492: tagging (try 2)
tag 562492 + patch thanks Lets see if i get it right this time. kk -- Karl Goetz, (Kamping_Kaiser / VK5FOSS) Debian contributor / gNewSense Maintainer http://www.kgoetz.id.au No, I won't join your social networking group signature.asc Description: PGP signature
Bug#562492: patch for debian/control
Tags: patch I'm not a member of the team, so I won't be able to commit this directly. kk -- Karl Goetz, (Kamping_Kaiser / VK5FOSS) Debian contributor / gNewSense Maintainer http://www.kgoetz.id.au No, I won't join your social networking group diff --git a/debian/control b/debian/control index 22d9fbf..4e2a193 100644 --- a/debian/control +++ b/debian/control @@ -18,7 +18,7 @@ Provides: ${python:Provides} Architecture: all Depends: ${shlibs:Depends}, ${misc:Depends}, ${python:Depends}, python-edbus, python-ecore, python-edje, python-evas, python-dbus, python-cairo, - libevas-svn-03-engines-x, dbus, zhone-illume-glue + libevas-svn-05-engines-x, dbus, zhone-illume-glue Description: freesmartphone.org demo GUI This is the demonstration user interfae to the freesmartphone.org software strack, providing a dialer, an SMS tool, access to the SIM-based address book signature.asc Description: PGP signature
Bug#559443: closed by Jan Dittberner (Bug#559443: fixed in dosbox 0.73+dfsg1-1)
On Sat, 05 Dec 2009 23:12:31 + ow...@bugs.debian.org (Debian Bug Tracking System) wrote: > This is an automatic notification regarding your Bug report > which was filed against the dosbox package: > > #559443: dosbox: ymf262{c,h} lack licence statements > > It has been closed by Jan Dittberner . > > Their explanation is attached below along with your original report. > If this explanation is unsatisfactory and you have not received a > better one in a separate message then please contact Jan Dittberner > by replying to this email. Thanks for your lightning fast work! kk -- Karl Goetz, (Kamping_Kaiser / VK5FOSS) Debian contributor / gNewSense Maintainer http://www.kgoetz.id.au No, I won't join your social networking group signature.asc Description: PGP signature
Bug#559445: linux-2.6: multiple files in ./arch/ without source
Package: linux-2.6 Version: linux-2.6-2.6.32~rc8 Severity: serious Justification: Policy 2.2.1 Hi, Severity serious since all files must have their source. The following files seem to have been generated from a file which is not in the Linux source tree. ./arch/arm/mach-integrator/include/mach/bits.h ./arch/arm/mach-integrator/include/mach/platform.h ./arch/arm/include/asm/sizes.h ./arch/sh/include/asm/sizes.h thanks, kk -- System Information: Debian Release: 5.0.3 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (i686) Kernel: Linux 2.6.30.7-libre-fshoppe1 (SMP w/2 CPU cores) Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#559444: linux-2.6: sv_addr.agh has no source file
Package: linux-2.6 Version: linux-2.6-2.6.32~rc8 Severity: serious Justification: Policy 2.2.1 Hi, ./arch/cris/include/arch-v10/arch/sv_addr.agh appears to be generated from another file, which is not in the Linux source tree. Ref: http://bugs.gnewsense.org/Bugs/00323 Ref: http://lists.gnu.org/archive/html/gnewsense-dev/2009-08/msg00188.html Thanks for investigating, kk -- System Information: Debian Release: 5.0.3 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (i686) Kernel: Linux 2.6.30.7-libre-fshoppe1 (SMP w/2 CPU cores) Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#559443: dosbox: ymf262{c,h} lack licence statements
Package: dosbox Version: 0.73 Severity: serious Hi, First: ymf262.c has no licence statement, so its not clear if its distributable. Second: In #530824 theres issue with fmopl.c(.h) and the possability of MAME code being copied. According to the reporter in [1] the same problem could be applicable to ymf262.{c,h}. It would be great if the status of these files could be clarified. [1] http://bugs.gnewsense.org/Bugs/00351 thanks, kk -- System Information: Debian Release: 5.0.3 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (i686) Kernel: Linux 2.6.30.7-libre-fshoppe1 (SMP w/2 CPU cores) Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#559425: Update (other files)
Hi, The following files might also be DFSG problems: BSDish licence + advertising clauses. ./ipppd/isexpired.c auth.c cbcp.c chap.c chap.h chap_ms.c chap_ms.h fsm.c fsm.h ipcp.c ipcp.h ipppd.h ipxcp.c ipxcp.h lcp.c lcp.h magic.c magic.h main.c options.c sys-linux.c upap.c upap.h These have no licence grant: ./ippd/md4.{c,h} radius.c These have no grant of redistribution: ./ipppd/md5.{c,h} ... and I stopped looking here. I assume other directories are equally affected. kk -- Karl Goetz, (Kamping_Kaiser / VK5FOSS) Debian contributor / gNewSense Maintainer http://www.kgoetz.id.au No, I won't join your social networking group signature.asc Description: PGP signature
Bug#559425: isdnutils: Not all files are GPL compatible
Package: isdnutils Severity: serious Justification: Policy 2.2.1 Hi, At least one file this package are GPL incompatible. ./eurofile/src/wuauth/sigfix.c bans monetary gain. (see also eurofile/COPYING.authlib ) Thanks, kk -- System Information: Debian Release: 5.0.3 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (i686) Kernel: Linux 2.6.30.7-libre-fshoppe1 (SMP w/2 CPU cores) Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#477060: [gNewSense-users] unclear licence of AMSLatex (fwd)
On Fri, 25 Sep 2009 00:20:33 +0200 Sam Geeraerts wrote: > ben schreef: > > Frank Kuester, the maintainer of the Debian texlive-base package, > > clarified some things in a comment to the Debian bug report > > (#477060): > > > > Sorry, I don't have time to subscribe and really join in. Just two > > points: No problem. I've CC'd the bug report as I hope you can confirm some items. Apologies in advance if you'd rather we don't in future. > > - In all systems following the TDS, path does matter, and moving a > > file from $TEXMF/tex/latex/ams/ to $TEXMF/myengine/latex/ams/ will > > make it inaccessible for LaTeX in a usual setup. > > So if we'd have to rename directories there would be a problem. I > assume that's not AMS' intention. > > Renaming files wouldn't be a problem if AMS allows aliases and > keeping the package ID. AFAICT, they do in the current wording, but > the question is: is that also what they mean? Frank, is this your understanding too? > > All in all, since Debian has a special exception to allow software > > that requires renaming of modified files, I don't care much whether > > the licensor does it "properly" (like using the LPPL) or naively. > > I'm not sure I follow this. Does "a special exception" mean: "we > > kind > of think it's not free, but we allow it anyway"? Anyway, probably not > relevant to gNewSense. I assume this is a DFSG/policy exception (similar to the requirement of all changes being distributed as diffs). TBH, I'd prefer the 'changes as diffs' approach over 'rename on change', but thats just me being a pain. kk -- Karl Goetz, (Kamping_Kaiser / VK5FOSS) Debian contributor / gNewSense Maintainer http://www.kgoetz.id.au No, I won't join your social networking group signature.asc Description: PGP signature