Your message dated Sun, 21 Feb 2016 10:20:21 +0000
with message-id <[email protected]>
and subject line Bug#807074: fixed in fbreader 0.12.10dfsg2-1
has caused the Debian Bug report #807074,
regarding fbreader: includes files with unclear DFSG-freeness and/or copyright
status
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
807074: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=807074
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: fbreader
Version: 0.10.7dfsg-4
Severity: serious
Justification: Policy 2.2.1
Hello Eugene and thanks for maintaining FBReader in Debian!
I noticed something awkward in the debian/copyright file:
[...]
| Html entity files (fbreader/data/formats/docbook/*.ent) with
| these licenses:
|
| <!-- Portions (C) International Organization for Standardization 1986
| Permission to copy in any form is granted for use with
| conforming SGML systems and applications as defined in
| ISO 8879, provided this notice is included in all copies.
| -->
|
| <!-- Copyright (C) 2001, 2002 Organization for the Advancement of Structured
| Information Standards (OASIS).
|
| Permission to use, copy, modify and distribute this entity set
| and its accompanying documentation for any purpose and without
| fee is hereby granted in perpetuity, provided that the above
| copyright notice and this paragraph appear in all copies. The
| copyright holders make no representation about the suitability of
| the entities for any purpose. It is provided "as is" without
| expressed or implied warranty.
|
| -->
[...]
The problem is: among these two licenses, the first one is non-free,
as it does not grant permission to modify (thus failing DFSG#3) and
only grants a limited permission to copy and use, restricting the
field of endeavor to conforming SGML systems and applications as
defined in ISO 8879 (thus failing DFSG#6).
The second license is instead fine for Debian main.
By only reading the debian/copyright file, it was not clear to me
whether both licenses apply (which would mean that these files
are non-free in fbreader) or, instead, whether the recipient may
choose which of the two licenses will apply (which would mean that
we can choose the second license and everything is fine for fbreader).
This freeness issue has been discussed on the debian-legal mailing list:
https://lists.debian.org/debian-legal/2015/11/msg00048.html
https://lists.debian.org/debian-legal/2015/11/msg00049.html
During that debian-legal thread, I was pointed out that the licensing
of those files in fbreader is a bit different from what is documented
in the fbreader debian/copyright file:
https://lists.debian.org/debian-legal/2015/11/msg00050.html
And indeed, the files under consideration include that permission grant,
saying that the DFSG-free license applies, but that the files are
derived, in part, from files (copyrighted by ISO) which grant no
permission to modify.
As I said in
https://lists.debian.org/debian-legal/2015/11/msg00051.html
I cannot fully understand how those files could be derived from
the ISO files in the first place, if the ISO files are not legally
modifiable.
Maybe OASIS obtained a special permission from ISO, but this does
not seem to be documented.
Otherwise, this looks like a copyright violation, which, if confirmed,
would result in undistributable files.
An FTP Assitant confirmed that files under the ISO license under
consideration are not fit for Debian main:
https://lists.debian.org/debian-legal/2015/12/msg00000.html
Please investigate and clarify and/or fix this issue.
Possible solutions I can think of:
A) clarify the licensing status of those files and find out
that they are distributable under DFSG-free terms; explain
and document why this is the case
B) get in touch with the copyright holder (ISO) and persuade
them to re-license the ISO files in a DFSG-free manner
C) find DFSG-free replacements for the non-free files
D) drop the non-free files from the package, assuming they are
not strictly needed for the package to provide significant
functionality
Thanks for your time!
--- End Message ---
--- Begin Message ---
Source: fbreader
Source-Version: 0.12.10dfsg2-1
We believe that the bug you reported is fixed in the latest version of
fbreader, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Eugene V. Lyubimkin <[email protected]> (supplier of updated fbreader package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 21 Feb 2016 10:46:49 +0100
Source: fbreader
Binary: fbreader libzlcore0.13 libzlcore-data libzltext0.13 libzltext-data
libzlui-gtk libzlui-qt4 libzlcore-dev libzltext-dev
Architecture: source amd64 all
Version: 0.12.10dfsg2-1
Distribution: unstable
Urgency: medium
Maintainer: Eugene V. Lyubimkin <[email protected]>
Changed-By: Eugene V. Lyubimkin <[email protected]>
Description:
fbreader - e-book reader
libzlcore-data - ZLibrary cross-platform development library (support files)
libzlcore-dev - ZLibrary cross-platform development library (development files)
libzlcore0.13 - ZLibrary cross-platform development library (shared library)
libzltext-data - ZLibrary text model/viewer part (support files)
libzltext-dev - ZLibrary text model/viewer part (development files)
libzltext0.13 - ZLibrary text model/viewer part (shared library)
libzlui-gtk - GTK+ interface module for ZLibrary
libzlui-qt4 - Qt4 interface module for ZLibrary
Closes: 807074
Changes:
fbreader (0.12.10dfsg2-1) unstable; urgency=medium
.
* debian/dfsg-repack:
- Also remove docbook- and XHTML entity files. (Closes: #807074)
* debian/patches:
- New patch fbreader-Makefile-do-not-try-to-install-empty-format.patch, so
upstream Makefile doesn't install unexisting XHTML entity files.
* debian/control:
- Updated Standards-Version to 3.9.6, no changes needed.
- Bumped debhelper build-dependency to >= 9.
* debian/rules:
- Modernized using dh overrides.
* debian/menu:
- Removed as suggested by lintian, since a .desktop-file is present.
* debian/libzlcore-data.lintian-overrides:
- Added to override a false positive about reproducibility of
usr/share/zlibrary/unicode.xml.gz.
Checksums-Sha1:
cc5f03daba0368cb554a0711a4302837161b561b 2355 fbreader_0.12.10dfsg2-1.dsc
4ff74ba0e9842306472f9ca1d7b8cebafe9a0b93 2286979
fbreader_0.12.10dfsg2.orig.tar.gz
df4fc10284c47f7e3cd037911ca0dd0a467586eb 20663 fbreader_0.12.10dfsg2-1.diff.gz
3187ba066ee215c65b4ed0937eef8be392b702ae 10502348
fbreader-dbgsym_0.12.10dfsg2-1_amd64.deb
f650ce7c4e53aafc1075653a4df0f6654c5e516c 722136
fbreader_0.12.10dfsg2-1_amd64.deb
edfa4266ff00f73dc4bf6cbc0071d0f904d75669 349204
libzlcore-data_0.12.10dfsg2-1_all.deb
e4ee6fc7499947bca4bf94522d648f1db336c002 36112
libzlcore-dev_0.12.10dfsg2-1_amd64.deb
c5d56b976ffe8432a144f8dced889b085f170fc4 2879568
libzlcore0.13-dbgsym_0.12.10dfsg2-1_amd64.deb
cc297abc488267019014bfcb19e7e598cf60e270 205656
libzlcore0.13_0.12.10dfsg2-1_amd64.deb
26ccd384d5f0bfc533d7c56580d0c165d10a5976 402326
libzltext-data_0.12.10dfsg2-1_all.deb
5493101d486301e1592117e4d3d1fd4d57130eec 27992
libzltext-dev_0.12.10dfsg2-1_amd64.deb
20c181eb217de38e9c9b5b87f6b4a877730afe1b 1462248
libzltext0.13-dbgsym_0.12.10dfsg2-1_amd64.deb
1b073cab03b90e709fa416a9f723d24164773307 111948
libzltext0.13_0.12.10dfsg2-1_amd64.deb
f059eee843c59ac07eb5e7d903515c2294fdcdc1 663564
libzlui-gtk-dbgsym_0.12.10dfsg2-1_amd64.deb
06d58b43631c71064fd9757e081086a29d722775 72654
libzlui-gtk_0.12.10dfsg2-1_amd64.deb
9caef31f453a3d2fa5b5f3eccc97448f1024537b 1367856
libzlui-qt4-dbgsym_0.12.10dfsg2-1_amd64.deb
390824127e78689d7cc98e907b71a1a349c5cab1 78148
libzlui-qt4_0.12.10dfsg2-1_amd64.deb
Checksums-Sha256:
4c2034aef221eee596e93154ed0dc4f4076bfff39fc4abf63d98220dbc9db266 2355
fbreader_0.12.10dfsg2-1.dsc
09bac851c434a6d916e487f6a05403600b92f9b11c233e21f4e33879dd2701f1 2286979
fbreader_0.12.10dfsg2.orig.tar.gz
2f9940aa1634ed2754a0c5d5ccd14561686f8327be19b5de8e4c52e1e7f8eb81 20663
fbreader_0.12.10dfsg2-1.diff.gz
b95246069c8bc831e261045eb749509d3af0154f38325a37f3604a32b6488629 10502348
fbreader-dbgsym_0.12.10dfsg2-1_amd64.deb
38a89b87c6ea38e62e3d6127de6fa01f68c6871ec9e0fd625b085f8a3816b276 722136
fbreader_0.12.10dfsg2-1_amd64.deb
97ea4a4af34a603f5782cb59e409343b306c0df3e2848fa20669719492070100 349204
libzlcore-data_0.12.10dfsg2-1_all.deb
085f952a07fa96b7c3c32beeb390a94da5b0824eebc9c6f0ce6b16df1dd8566d 36112
libzlcore-dev_0.12.10dfsg2-1_amd64.deb
e8cf4321ca7db246a436fae967fd9c0cb342a74f1636a3fba1458808aa875199 2879568
libzlcore0.13-dbgsym_0.12.10dfsg2-1_amd64.deb
2fa9cb8fc89cba8ec4e0adba0f5e7b5d202f669acfcaaa740bcd7ce8a75387bb 205656
libzlcore0.13_0.12.10dfsg2-1_amd64.deb
b1ca3a0e68c51140f880231e966069b178a684f9628a59e08fef2fdd1a280051 402326
libzltext-data_0.12.10dfsg2-1_all.deb
f1b7e8c0382b4524d08988f3cc83a167d63743acac24c2e73a4b04c6179fa176 27992
libzltext-dev_0.12.10dfsg2-1_amd64.deb
8d08f72784ceb52dfaf34e604fde6e6979b128f7a1452196159623c16bb25448 1462248
libzltext0.13-dbgsym_0.12.10dfsg2-1_amd64.deb
e4a514c5203876cf8e6b7e01e04107764feb2d19a951b80ae8dab7de0929bea0 111948
libzltext0.13_0.12.10dfsg2-1_amd64.deb
165459b409f06269275249f8221dd112821bfcb355fbcfbef9cfd76c7e1f99a2 663564
libzlui-gtk-dbgsym_0.12.10dfsg2-1_amd64.deb
3decf2a4ad28f222388a70f95b350a802d09dfb4be5418bed99639d72e458b2d 72654
libzlui-gtk_0.12.10dfsg2-1_amd64.deb
e2cc9ba6ec8216a55c7cf227b138e86303cd631cd9182f6f2439e8d3b9d4e8d1 1367856
libzlui-qt4-dbgsym_0.12.10dfsg2-1_amd64.deb
d1afc16b64a5ac6ec21d3eba9ae2a2e220712e26d3318353d073a999e7f5d2bf 78148
libzlui-qt4_0.12.10dfsg2-1_amd64.deb
Files:
eed7a077ffa65c18c68f0b644fbf99bf 2355 text optional fbreader_0.12.10dfsg2-1.dsc
a0527c1a5b76c7e24d7b1a9d6ff928ce 2286979 text optional
fbreader_0.12.10dfsg2.orig.tar.gz
ae0f65692e75df82a5873315d873e139 20663 text optional
fbreader_0.12.10dfsg2-1.diff.gz
0f5926bcbe876775d94775976a7db4f4 10502348 debug extra
fbreader-dbgsym_0.12.10dfsg2-1_amd64.deb
a83f52c5eab0139481c32c6df1b29a7e 722136 text optional
fbreader_0.12.10dfsg2-1_amd64.deb
4df1750709831155222873f6e3ae9dd9 349204 libs optional
libzlcore-data_0.12.10dfsg2-1_all.deb
ebd3649f84bc8feac27ef6b62dfbc494 36112 libdevel optional
libzlcore-dev_0.12.10dfsg2-1_amd64.deb
1db85233a64d581a084398df7fe74162 2879568 debug extra
libzlcore0.13-dbgsym_0.12.10dfsg2-1_amd64.deb
b98a9d718a24c6f8d0f0b7cc66d2eac1 205656 libs optional
libzlcore0.13_0.12.10dfsg2-1_amd64.deb
a64000176146eacd36793aefe5e519a1 402326 libs optional
libzltext-data_0.12.10dfsg2-1_all.deb
e0f7a0b2e6dd8bffbeab3989c65f2abc 27992 libdevel optional
libzltext-dev_0.12.10dfsg2-1_amd64.deb
423082ed3e28ebaa213616c7c0f565cc 1462248 debug extra
libzltext0.13-dbgsym_0.12.10dfsg2-1_amd64.deb
d10fe7d98fbf540e32543f31b54dcf4f 111948 libs optional
libzltext0.13_0.12.10dfsg2-1_amd64.deb
13e6a508fa7294965e304d0342caf215 663564 debug extra
libzlui-gtk-dbgsym_0.12.10dfsg2-1_amd64.deb
6a4dbf59e0cd8d08f5f42c13000f569d 72654 libs optional
libzlui-gtk_0.12.10dfsg2-1_amd64.deb
3a7ebb17e81bce339a52815478751fd2 1367856 debug extra
libzlui-qt4-dbgsym_0.12.10dfsg2-1_amd64.deb
a9be081fddc75d65547c98812d59c87a 78148 libs optional
libzlui-qt4_0.12.10dfsg2-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=k6aC
-----END PGP SIGNATURE-----
--- End Message ---
