Your message dated Tue, 09 Jan 2024 22:07:56 +0000 with message-id <[email protected]> and subject line Bug#1054457: fixed in perl 5.38.2-2 has caused the Debian Bug report #1054457, regarding Remove HSIEH-* licenses from copyright file in Debian Perl packages to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 1054457: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1054457 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: perl-base Version: 5.36.0-9 Description: The Perl project has removed the superfast hash algorithm that was licensed under Paul Hsieh licenses back in 2016, starting with the Perl v5.25.8 release. This can be verified here starting on line 292 : https://github.com/Perl/perl5/commit/236a70292a4ef354958701000e8897894141eb26#diff-1df6111f72905bc0931765fbcf59be7a35f30d96a502ee0c4c7a3c24b57ae5baL292 This means that the `copyright` file used for the Debian packaging of Perl is outdated and the HSIEH-DERIVATIVE and HSIEH-BSD licenses should be removed from its contents. Impact: This situation has several implications, like existing automated OSS license compliance tools, such as `tern`, reporting inaccurately that the HSIEH licenses apply to recent Perl packages on Debian and Debian-based systems. How to fix: Remove the HSIEH-DERIVATIVE and HSIEH-BSD licenses sections from the `copyright` file used in the Debian packaging of Perl.
--- End Message ---
--- Begin Message ---Source: perl Source-Version: 5.38.2-2 Done: Niko Tyni <[email protected]> We believe that the bug you reported is fixed in the latest version of perl, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Niko Tyni <[email protected]> (supplier of updated perl package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 09 Jan 2024 22:05:06 +0200 Source: perl Architecture: source Version: 5.38.2-2 Distribution: unstable Urgency: medium Maintainer: Niko Tyni <[email protected]> Changed-By: Niko Tyni <[email protected]> Closes: 1054457 Changes: perl (5.38.2-2) unstable; urgency=medium . * Update copyright file for the superfast hash algorithm removal. Thanks to Milton Moura. (Closes: #1054457) * Add 5.38.2 to debian/released-versions. * Upload to unstable. Checksums-Sha1: 024d051d8328fa97304fdc3b5306c01e67f8e141 2933 perl_5.38.2-2.dsc 4c6387a62164aab2ef6239532159fbb879b6e155 165124 perl_5.38.2-2.debian.tar.xz 6f3ed06db22c1b1a90edf0bd9eeb850f61690d5d 6270 perl_5.38.2-2_source.buildinfo Checksums-Sha256: 1b59387ea846e44061e57cd2842d2d1ff365e2098ba8eeed419568ed63bc8d72 2933 perl_5.38.2-2.dsc f72804e4d8caed21e29248d3b135403cd1687a4358e635c2d29c74d32120b0a6 165124 perl_5.38.2-2.debian.tar.xz 3cd5edc981cc747fc8208bf0ee1ec9bf9a459704f6a06c0ebcf16c2f21998dda 6270 perl_5.38.2-2_source.buildinfo Files: 517ca5b69304496a05f205d8d614fd03 2933 perl standard perl_5.38.2-2.dsc 75d4335ac171b2008408a035d3adff2e 165124 perl standard perl_5.38.2-2.debian.tar.xz e47798a6e2639c7a02bac8bce9ecff93 6270 perl standard perl_5.38.2-2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJFBAEBCgAvFiEEdqKOQsmBHZHoj7peLsD/s7cwGx8FAmWdqbIRHG50eW5pQGRl Ymlhbi5vcmcACgkQLsD/s7cwGx/UJg/+J+sDgR/UaFmI4UgBKTdKq3imcfc1Lnw3 Ykzh/gcVcpeOfqmQhR2+hhciPEMFUSvoqPaT/TsNUZYVSzQPtgf3eWK+/sWREHNH yeGXDFB4fDqP9DJC7yRTCZ/aIrJl0gtkaPR6kXWdC5lFGMEe1P5WBPEBdotvfVIY 9XfmJou1RSK0F+Q91F/hPhoVxCWwJXpta26JjOfUIS92chH5iVNbF2RvK7FJV9+F sMcHlKeS4EUZWFWClRpvDqR6/g/BhR+VMt4seOJjh7JTUkM/NwltNNDH2oFzuKLd r1rkpstxIKK4qKezAuz6YdWluYZSjJREurcYdfFWF3eglXenE7/3+SqVgq8YNcIg 70JkeHMrzJ1sa666sQSxpVsRLAGodHSI4OYdiYDF9FBfdSkynGTBSrljKYVjDI4b woneWXkRE7YlvUGwzIt2TlJhs9KVP9Kq6ghA55WTabONMSfoyCQav14gpLbKhFw9 mu9uk3H3x2Ihmyu6DwT/iz07ee1lOuljVrTYx5cWreY2rgPlokWI9tJwmDasi7WK p/tfDkagfSOD50r65p58BxR8OlhNg1de+ufDyQIE1s7lWRRTlr/8X35cAfRsPDY1 A/OPku9srshZ5rNcRlG9PHe3yy8pnddSyHDygR0TavinAoA5+sBGQvojdpaaikBB sja0b6C57Zc= =1A4p -----END PGP SIGNATURE-----
--- End Message ---
