Bug#781011: libdb5.3 license problem

2015-03-23 Thread Kouta Ikematsu
Package: libdb5.3
Serverity: serious

Hello.

libdb5.3 is included licensed under Artistic license code. no version elected.

Note: If this license is Artistic License Version 2, This is not problem. 
(Artistic License 2.0 is FSF-Free, GPL compatible.)


FileList:

src/crypto/mersenne/mt19937db.c



This code is DFSG-Free, but not FSF-Free, and GPL incompatible.

This library used GPL'ed software. (E,g jigdo, etc...) It is non-free, GPL 
incompatible. (See Summary)
 
And, Not display this code's copyright statement. (missing copyright file)


Summary:

SleepyCat License code + Artistic License (Version 1.0) or FSF non-free code + 
GPL code = Not OK (GPL incompatible) 

SleepyCat License code + Artistic Licence (Version 2.0) code + GPL code = OK 
(GPL compatible) 

SleepyCat License code + GPL or GPL compatible license code + GPL code  = OK 
(GPL compatible)

(Note: GPL code is no exception, default GPL licensed code.)


Suggests:

1. Remove GPL problematic code, and rebuild. and add copyright file.

2. Replace GPL compatible code, and rebuild. and add copyright file.

3. Contact Upstream author.

4. Remove Debian archive.



Reference:

https://bugzilla.redhat.com/show_bug.cgi?id=886838
https://lists.debian.org/debian-devel/2013/07/msg00140.html
https://www.gnu.org/philosophy/license-list.html#ArtisticLicense
https://www.gnu.org/philosophy/license-list.html#ArtisticLicense2
https://wiki.debian.org/DFSGLicenses#The_Artistic_License


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#781011: [pkg-db-devel] Bug#781011: libdb5.3 license problem

2015-03-23 Thread Ondřej Surý
Control: severity -1 minor

As you might know from:

https://bugzilla.redhat.com/show_bug.cgi?format=multipleid=886838

since it uses same style, it's purely documentation issue as the mersene
twister was also released under BSD license, for more reference also see
here:

https://lists.fedoraproject.org/pipermail/scm-commits/Week-of-Mon-20130506/1016593.html

Thus lowering the severity to minor.

You could also find this statement from upstream authors:

http://www.math.sci.hiroshima-u.ac.jp/~m-mat/MT/MT2002/elicense.html

Anything would be better than filling serious bug with proposal such as
Remove Debian archive..

Cheers,
Ondrej
On Mon, Mar 23, 2015, at 08:59, Kouta Ikematsu wrote:
 Package: libdb5.3
 Serverity: serious
 
 Hello.
 
 libdb5.3 is included licensed under Artistic license code. no version
 elected.
 
 Note: If this license is Artistic License Version 2, This is not
 problem. (Artistic License 2.0 is FSF-Free, GPL compatible.)
 
 
 FileList:
 
 src/crypto/mersenne/mt19937db.c
 
 
 
 This code is DFSG-Free, but not FSF-Free, and GPL incompatible.
 
 This library used GPL'ed software. (E,g jigdo, etc...) It is non-free,
 GPL incompatible. (See Summary)
  
 And, Not display this code's copyright statement. (missing copyright
 file)
 
 
 Summary:
 
 SleepyCat License code + Artistic License (Version 1.0) or FSF non-free
 code + GPL code = Not OK (GPL incompatible) 
 
 SleepyCat License code + Artistic Licence (Version 2.0) code + GPL code
 = OK (GPL compatible) 
 
 SleepyCat License code + GPL or GPL compatible license code + GPL code 
 = OK (GPL compatible)
 
 (Note: GPL code is no exception, default GPL licensed code.)
 
 
 Suggests:
 
 1. Remove GPL problematic code, and rebuild. and add copyright file.
 
 2. Replace GPL compatible code, and rebuild. and add copyright file.
 
 3. Contact Upstream author.
 
 4. Remove Debian archive.
 
 
 
 Reference:
 
 https://bugzilla.redhat.com/show_bug.cgi?id=886838
 https://lists.debian.org/debian-devel/2013/07/msg00140.html
 https://www.gnu.org/philosophy/license-list.html#ArtisticLicense
 https://www.gnu.org/philosophy/license-list.html#ArtisticLicense2
 https://wiki.debian.org/DFSGLicenses#The_Artistic_License
 
 ___
 pkg-db-devel mailing list
 pkg-db-de...@lists.alioth.debian.org
 http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-db-devel


-- 
Ondřej Surý ond...@sury.org
Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org