Package: w3c-dtd-xhtml
Version: 1.2-4
Severity: serious
Justification: Policy §12.5

1. The file /usr/share/doc/w3c-dtd-xhtml/copyright is not
encoded as UTF-8, which is a MUST in Policy.

2. very long; for a 'tl;dr' see below (grep for 'CONCLUSION')

The following sentence can be found in the file…

| According to http://www.w3.org/Consortium/Legal/IPR-FAQ-20000620.html,
| "while schemas and DTDs are frequently part of our specifications and
| seemingly fall under the document copyright terms, you may use them under
| the W3C Software License."

… but this is not true, this information is not contained within that
document any more. I’ve done some web.archive.org digging, and the last
version in which it was included is:

http://web.archive.org/web/20090817142721/http://www.w3.org/Consortium/Legal/IPR-FAQ-20000620.html#DTD

| Check the actual schema or DTDs for a specific license.
|
| Otherwise, while schemas and DTDs are frequently part of our specifications 
and seemingly fall
| under the [73]document copyright terms, you may use them under the [74]W3C 
Software License. The
| software license requires that you include/retain the copyright attribution 
and that you indicate
| any modification that you make. In the case of DTDs and schema, you must 
indicate your change by
| changing the namespace and/or public identifier so to distinguish your 
altered version from the W3C
| version. We further appreciate a couple sentences regarding who made the 
modifications, when, and
| what changes were made — a common software documentation practice.
|
| We expect to revisit this topic as meta-data schemas become an increasingly 
important part of W3C
| specifications and as the meta-data schema definition capabilities of XML and 
RDF advance.
|
| [added 19990323; tweaked 20030102]

So this information no longer applies. However, either statement is a
licence grant that’s not revoked, so I guess this still works.

There is an older grant at
http://web.archive.org/web/20021125050943/http://www.w3.org/Consortium/Legal/IPR-FAQ-20000620.html#DTD
which does not allow general default to the software licence however.

Actually, the oldest grant still found is:
http://web.archive.org/web/20000815195302/http://www.w3.org/Consortium/Legal/IPR-FAQ-20000620.html#DTD

| Schemas (and DTDs) are frequently part of our specifications and seemingly 
fall under the
| [58]document copyright terms. However, as long as you do not use the same 
formal namespace or
| public identifier to identify that modified W3C schema/DTD (which might 
confuse applications), you
| may treat the schema/DTD under the [59]software terms. This means that you 
are permitted to make a
| derivative or modified W3C schema/DTD, but even under the [60]software terms 
you are obligated to
| include/retain the W3C copyright notice. We further appreciate a couple 
sentences regarding who
| made the modifications, when, and what changes were made in the original DTD 
-- a common software
| documentation practice.
|
| We expect to revisit this topic as metadata schemas become and increasingly 
important part of W3C
| specifications and as the metadata schema definition capabilities of XML and 
RDF advance.
|
| [added 19990323]

The problem with these grants, all of them, is that any document
published past their date (i.e. between 20090817 and 20100217, the
exact cutoff point being unclear) is *NOT* covered by them.

In the case of all files included in this package, they probably
are older than the cutoff date.

The extra grant is useful for files like xhtml1-frameset.dtd which
lacks an explicit licence grant, and the entities files, whose grant
is restricted, although XHTML 1.1 thankfully has a separate, much
easier grant.

The relevant licence to use, by the way, is this (I checked it, and
it’s identical to the subsequent archive snapshot):

http://web.archive.org/web/20090815033126/http://www.w3.org/Consortium/Legal/2002/copyright-software-20021231

The “short notice” should also be added to the Debian copyright file
as it’s part of the licence. It is (again, same as next snapshot):
http://web.archive.org/web/20090814014731/http://www.w3.org/Consortium/Legal/2002/copyright-software-short-notice-20021231.html

It says:
| This formulation of W3C's notice and license became active on December 31 
2002. This version
| removes the copyright ownership notice such that this license can be used 
with materials other than
| those owned by the W3C, reflects that ERCIM is now a host of the W3C, 
includes references to this
| specific dated version of the license, and removes the ambiguous grant of 
"use". Otherwise, this
| version is the same as the [15]previous version and is written so as to 
preserve the
With “previous version” being a link to the one included in the Debian 
copyright file.

I’m a bit wondering about the “ambiguous grant of "use"” part though.
Interestingly enough, the OSI still lists the previous version, despite
http://article.gmane.org/gmane.comp.licenses.open-source.general/834
requesting an update.

The newest file I could find in the package is dated 2002-08-01 though,
which uses the defaultless grant. This affects the three XHTML 1.0 DTDs;
an older version of those DTDs which is covered by the better grant may
still exist on the ’net; they could be used if not too buggy.

Anything else is old enough (XHTML 1.1 was last updated 2001-05-29) for
http://web.archive.org/web/20010602194347/http://www.w3.org/Consortium/Legal/IPR-FAQ-20000620.html#DTD
to apply, which has the more broad grant and, just as important, the
http://web.archive.org/web/20010604080411/http://www.w3.org/Consortium/Legal/copyright-software-19980720
licence with “use” still permitted, and no separate document needed to
structure the “short notice”; it’s still GPL-compatible.

As for XHTML 1.0 Second Edition, the three files in question (see below)
do not have an explicit licence mentioned, so the grant from
http://web.archive.org/web/20020806141443/http://www.w3.org/Consortium/Legal/IPR-FAQ-20000620.html#DTD
with “if no specific license exists” applies to them, with its licence
http://web.archive.org/web/20021010093258/http://www.w3.org/Consortium/Legal/copyright-software-19980720
being the same as above.

==================================================================

My recommendation would be to go with
http://web.archive.org/web/20010602194347/http://www.w3.org/Consortium/Legal/IPR-FAQ-20000620.html#DTD
as licence grant and
http://web.archive.org/web/20010604080411/http://www.w3.org/Consortium/Legal/copyright-software-19980720
as licence, to include the both of them (in UTF-8!) in the Debian
copyright file, and to find replacements not older than 2001-06-02
for the following files:
• /usr/share/xml/xhtml/schema/dtd/1.0/xhtml1-strict.dtd (2002-07-31)
• /usr/share/xml/xhtml/schema/dtd/1.0/xhtml1-frameset.dtd (2002-08-01)
• /usr/share/xml/xhtml/schema/dtd/1.0/xhtml1-transitional.dtd (2002-08-01)

Unfortunately, there is a Second Edition of XHTML 1.0 which was
“revised 1 August 2002”, which users will probably want.


CONCLUSION: So, my recommendation is the following:

Include the text from the following link (as UTF-8!) as licence:
http://web.archive.org/web/20021010093258/http://www.w3.org/Consortium/Legal/copyright-software-19980720

Include the licence grant from the following link…
http://web.archive.org/web/20020806141443/http://www.w3.org/Consortium/Legal/IPR-FAQ-20000620.html#DTD
… and make it extremely clear that this only applies to the files
/usr/share/xml/xhtml/schema/dtd/1.0/xhtml1-*.dtd, and include…
http://web.archive.org/web/20010602194347/http://www.w3.org/Consortium/Legal/IPR-FAQ-20000620.html#DTD
… as grant for all other files; both as textual excerpt.

I’ve included a replacement debian/copyright file I’d use.


-- System Information:
Debian Release: stretch/sid
  APT prefers unreleased
  APT policy: (500, 'unreleased'), (500, 'buildd-unstable'), (500, 'unstable')
Architecture: x32 (x86_64)
Foreign Architectures: i386, amd64

Kernel: Linux 4.5.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=C, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/lksh
Init: sysvinit (via /sbin/init)

Versions of packages w3c-dtd-xhtml depends on:
ii  sgml-base  1.27
ii  sgml-data  2.0.10
ii  xml-core   0.13+nmu2

w3c-dtd-xhtml recommends no packages.

w3c-dtd-xhtml suggests no packages.

-- no debconf information
This package was debianized by Frederic Schutz <sch...@mathgen.ch> on
Mon,  9 Dec 2002 22:03:01 +1100.

It was downloaded from

  - http://www.w3.org/TR/xhtml-basic/xhtml-basic.tgz
  - http://www.w3.org/TR/xhtml1/xhtml1.tgz
  - http://www.w3.org/TR/xhtml11/xhtml11.tgz

Upstream Authors: W3C HTML Working Group <www-h...@w3.org>

Licence grant for /usr/share/xml/xhtml/schema/dtd/1.0/xhtml1-*.dtd only:

| However, if no specific license exists for such a DTD or schema, as long as
| you do not use the same formal namespace or public identifier to identify
| that modified W3C schema/DTD (which might confuse applications), you often
| may treat the schema/DTD under the software terms. This means that you are
| permitted to make a derivative or modified W3C schema/DTD, but even under
| the software terms you are obligated to include/retain the W3C copyright
| notice. We further appreciate a couple sentences regarding who made the
| modifications, when, and what changes were made in the original DTD — a
| common software documentation practice.
+-| From: 
http://web.archive.org/web/20020806141443/http://www.w3.org/Consortium/Legal/IPR-FAQ-20000620.html#DTD

Licence grant for all other files:

| Schemas (and DTDs) are frequently part of our specifications and seemingly
| fall under the document copyright terms. However, as long as you do not use
| the same formal namespace or public identifier to identify that modified W3C
| schema/DTD (which might confuse applications), you may treat the schema/DTD
| under the software terms. This means that you are permitted to make a
| derivative or modified W3C schema/DTD, but even under the software terms you
| are obligated to include/retain the W3C copyright notice. We further
| appreciate a couple sentences regarding who made the modifications, when,
| and what changes were made in the original DTD -- a common software
| documentation practice.
+-| From: 
http://web.archive.org/web/20010602194347/http://www.w3.org/Consortium/Legal/IPR-FAQ-20000620.html#DTD

Software licence terms:

| W3C^® SOFTWARE NOTICE AND LICENSE
|
| Copyright © 1994-2002 World Wide Web Consortium, (Massachusetts
| Institute of Technology, Institut National de Recherche en
| Informatique et en Automatique, Keio University). All Rights Reserved.
| http://www.w3.org/Consortium/Legal/
|
| This W3C work (including software, documents, or other related items)
| is being provided by the copyright holders under the following license.
| By obtaining, using and/or copying this work, you (the licensee) agree
| that you have read, understood, and will comply with the following
| terms and conditions:
|
| Permission to use, copy, modify, and distribute this software and its
| documentation, with or without modification, for any purpose and
| without fee or royalty is hereby granted, provided that you include the
| following on ALL copies of the software and documentation or portions
| thereof, including modifications, that you make:
|  1. The full text of this NOTICE in a location viewable to users of the
|     redistributed or derivative work.
|  2. Any pre-existing intellectual property disclaimers, notices, or
|     terms and conditions. If none exist, a short notice of the
|     following form (hypertext is preferred, text is permitted) should
|     be used within the body of any redistributed or derivative code:
|        "Copyright © [$date-of-software] World Wide Web Consortium,
|        (Massachusetts Institute of Technology, Institut National de
|        Recherche en Informatique et en Automatique, Keio University).
|        All Rights Reserved. http://www.w3.org/Consortium/Legal/";
|  3. Notice of any changes or modifications to the W3C files, including
|     the date changes were made. (We recommend you provide URIs to the
|     location from which the code is derived.)
|
| THIS SOFTWARE AND DOCUMENTATION IS PROVIDED "AS IS," AND COPYRIGHT
| HOLDERS MAKE NO REPRESENTATIONS OR WARRANTIES, EXPRESS OR IMPLIED,
| INCLUDING BUT NOT LIMITED TO, WARRANTIES OF MERCHANTABILITY OR FITNESS
| FOR ANY PARTICULAR PURPOSE OR THAT THE USE OF THE SOFTWARE OR
| DOCUMENTATION WILL NOT INFRINGE ANY THIRD PARTY PATENTS, COPYRIGHTS,
| TRADEMARKS OR OTHER RIGHTS.
|
| COPYRIGHT HOLDERS WILL NOT BE LIABLE FOR ANY DIRECT, INDIRECT, SPECIAL
| OR CONSEQUENTIAL DAMAGES ARISING OUT OF ANY USE OF THE SOFTWARE OR
| DOCUMENTATION.
|
| The name and trademarks of copyright holders may NOT be used in
| advertising or publicity pertaining to the software without specific,
| written prior permission. Title to copyright in this software and any
| associated documentation will at all times remain with copyright
| holders.

From: 
http://web.archive.org/web/20021010093258/http://www.w3.org/Consortium/Legal/copyright-software-19980720

Reply via email to