Your message dated Sat, 08 Aug 2026 12:04:30 +0000
with message-id <[email protected]>
and subject line Bug#665334: fixed in fontforge 1:20251009+git20260808~dfsg-1
has caused the Debian Bug report #665334,
regarding fontforge: source contains non-DFSG PostScript
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
665334: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=665334
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: fontforge
Severity: serious
On 03/03/2012 07:48 AM, Nicholas Bamber wrote:
> We have a package libimager-perl where we have had to remove a few
> adobe-related test files as being non-DFSG. See
> http://cpansearch.perl.org/src/TONYC/Imager-0.88/adobe.txt .
>
> However given a comment in the latest version's changelog:
>
> " - note that the generator of the apparently non-DFSG-free postscript
> in MMOne.pfb is a Debian package."
>
> by which he means fontforge. I intend to email to the author and assure
> him that this is a purely precautionary measure on our part and that the
> functionality of the package is not inhibited.
>
> However since fontforge has been roped into the issue I wonder what you
> guys think.
Hi Nicholas--
Thank you for raising this issue. I just did a bit of research to try
to figure out what this is about.
In fontforge, it appears that this code is embedded in
fontforge/othersubrs.c
The originals of several of these functions seem to appear (with
non-DFSG-free licensing) in the appendices of
http://partners.adobe.com/public/developer/en/font/5015.Type1_Supp.pdf
In particular, the licensing says:
>>> This code, as well as the code in the following appendices, is copyrighted
>>> by
>>> Adobe Systems Incorporated, and may not be reproduced except by
>>> permission of Adobe Systems Incorporated. Adobe Systems Incorporated
>>> grants permission to use this code in Type 1 font programs, as long as the
>>> code is used as it appears in this document, the copyright notice remains
>>> intact, and the character outline code included in such a font program is
>>> neither copied nor derived from character outline code in any Adobe Systems
>>> font program.
This license looks pretty non-DFSG-free to me, and it applies at least
to the makeblendedfont array in fontforge/othersubrs.c.
Even more depressing, the makeblendedfont array in othersubrs.c actually
has a modified comment (correcting a mistakenly copy/pasted buggy
comment from the code in the PDF!) which potentially means that it is
itself in violation of Adobe's restrictive license.
I'm not really sure what to do about this other than to open an RC bug
against fontforge, which this e-mail should do :(
We could probably make a new dfsg-free "clean" upstream tarball that is
still capable of building fontforge binaries by ripping out big chunks
of this file (i haven't tried it yet), but i don't know what that would
do to fontforge's ability to do Type1 font generation.
Another approach would be to move fontforge from the main archive to the
non-free archive; but it seems like that would relegate many of our font
packages to contrib, due to build-dependencies. :(
I'm open to other suggestions; i would be overjoyed, in fact, to hear
other suggestions. Does anyone have any proposals?
--dkg
--- End Message ---
--- Begin Message ---
Source: fontforge
Source-Version: 1:20251009+git20260808~dfsg-1
Done: Bastian Germann <[email protected]>
We believe that the bug you reported is fixed in the latest version of
fontforge, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Bastian Germann <[email protected]> (supplier of updated fontforge package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 08 Aug 2026 13:38:02 +0200
Source: fontforge
Architecture: source
Version: 1:20251009+git20260808~dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Fonts Task Force <[email protected]>
Changed-By: Bastian Germann <[email protected]>
Closes: 665334 1083402
Changes:
fontforge (1:20251009+git20260808~dfsg-1) unstable; urgency=medium
.
* Team upload
* New upstream version 20251009+git20260808~dfsg
* Exclude multimastersubrs instead of patching (Closes: #665334)
* Exclude cxxopts
* Add Build-Depends: libgtkmm-3.0-dev
* Add Depends: unzip
* d/copyright: Update to new version
* Drop Depends: python3-pkg-resources (Closes: #1083402)
Checksums-Sha1:
24425443023dbcd4f80c43dfbd4938ce9630d99f 2912
fontforge_20251009+git20260808~dfsg-1.dsc
dd59710305c755eb59d7e33001db057b7f42681a 12943916
fontforge_20251009+git20260808~dfsg.orig.tar.xz
ca155119afd173c26fb8d091636d1189c2d2806b 54176
fontforge_20251009+git20260808~dfsg-1.debian.tar.xz
4c8068ed613ec4214e5e278c373f59513f57fd70 16181
fontforge_20251009+git20260808~dfsg-1_source.buildinfo
Checksums-Sha256:
c622d86045a01cb473985d3fe1d1b24558efcd5be28fdba8b69d7c7a176b2112 2912
fontforge_20251009+git20260808~dfsg-1.dsc
019a74b13f40ca88ffe8cb2706a7df40ecabae3976a5cc22d3e3063124b5c567 12943916
fontforge_20251009+git20260808~dfsg.orig.tar.xz
90c55517a298786747d8e4d5b516d770b71c0f70b024eeee7a4fc68f5ab113e2 54176
fontforge_20251009+git20260808~dfsg-1.debian.tar.xz
28e59146b79dc193dbfe6f7bbded4cd5ef4f633c6131f746b8a6fd782f6abcfa 16181
fontforge_20251009+git20260808~dfsg-1_source.buildinfo
Files:
d616850bb599aa59b9ee626e1cc3e1f5 2912 fonts optional
fontforge_20251009+git20260808~dfsg-1.dsc
6eaae7db9b4d28a5c0754e035cf53832 12943916 fonts optional
fontforge_20251009+git20260808~dfsg.orig.tar.xz
15264432c357f55c182a5a0499c5124c 54176 fonts optional
fontforge_20251009+git20260808~dfsg-1.debian.tar.xz
3a6d4aa190569a8fdc2f83ffd6568556 16181 fonts optional
fontforge_20251009+git20260808~dfsg-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=ktLq
-----END PGP SIGNATURE-----
pgpl1hRfYWSIW.pgp
Description: PGP signature
--- End Message ---
