Bug#659541: Please enable autobuild for upx-nrv
Hi, this request is DENIED. The most likely outcome of #661372 (upx-nrv being undistributable) is a package removal, but if it indeed gets fixed, you can reapply for the autobuild exception. Sorry Philipp Kern signature.asc Description: Digital signature
Bug#659541: Please enable autobuild for upx-nrv
Hi, Robert Luberda rob...@debian.org writes: Ansgar Burchardt wrote: The source for upx itself is provided on the upstream website (and upx-ucl package is built from it), source for NRV is not available. http://www.gnu.org/licenses/gpl-faq.html#UnchangedJustBinary The source for upx is distributed in upx-ucl source package, isn't this enough? There's nothing that guarantees the versions of both packages stay in sync or upx-ucl could get removed while upx-nrv stays in the archive, so this is no good solution (also I did not even see it mentioned in the upx-nrv source package). Sure, but nobody else can redistribute the resulting binaries unless they do get special permission (the GPL doesn't allow this, see above). Quoting http://upx.sourceforge.net: All Rights Reserved. This program may be used freely, and you are welcome to redistribute and/or modify it under certain conditions. And the 'certain conditions' seem refer to the GPL-2 according to [1] which is referenced in the next paragraph: | This program is distributed in the hope that it will be useful, but | WITHOUT ANY WARRANTY; without even the implied warranty of | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the UPX | License Agreement for more details. If there are other conditions under which upx (or upx-nrv) may be distributed, I missed them. [1] http://upx.sourceforge.net/upx-license.html there were some discussions regarding upx licensing in the past. It seems however all of them refer to the ucl version. I cannot find any clues if the conclusions are applicable to the nrv version or not, but there is one thing I'm pretty sure - the upx license hasn't changed at all since upx-nrv was allowed into Debian 12 years ago. I cannot understand why we still have issue with it, and moreover I have no idea how to solve the issue once and forever. I did not find anything with a quick search either, but it might well be that nobody noticed in the last decade. In any case the problem could be solved if upstream a, makes available headers and object files for nrv and adds an exception to the UPX license to link against nrv and distribute the resulting binaries similar to exceptions that allow linking GPL code with other GPL-incompatible libraries such as OpenSSL, or b, releases the binaries for upx-nrv under a license that allows distribution w/o providing corresponding source code (or other problematic requirements). It might also need to allow distributing the modified binaries obtained by running upx -d in debian/rules as well. Of course the license for nrv must also allow this. Regards, Ansgar -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#659541: Please enable autobuild for upx-nrv
Robert Luberda rob...@debian.org writes: Ansgar Burchardt wrote: Robert Luberda rob...@debian.org writes: The package is upx-nrv, and it's license allow redistributing or modifying the program under GNU GPL with a special exception granted for compressed executables. If it's licensed under the GPL: where is the source? The source for upx itself is provided on the upstream website (and upx-ucl package is built from it), source for NRV is not available. http://www.gnu.org/licenses/gpl-faq.html#UnchangedJustBinary http://www.gnu.org/licenses/gpl-faq.html#GPLIncompatibleLibs And how can you link it against a non-free library and distribute the resulting binary? NRV library is written by the same authors, so I assume they can link their upx binaries with their library. Sure, but nobody else can redistribute the resulting binaries unless they do get special permission (the GPL doesn't allow this, see above). Regards, Ansgar -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#659541: Please enable autobuild for upx-nrv
Robert, am Sun, Feb 26, 2012 at 11:26:31PM +0100 hast du folgendes geschrieben: NRV library is written by the same authors, so I assume they can link their upx binaries with their library. true, and they can distribute it. But we can't distribute it under the GPL then. Kind regards, Philipp Kern -- .''`. Philipp KernDebian Developer : :' : http://philkern.de Stable Release Manager `. `' xmpp:p...@0x539.de Wanna-Build Admin `-finger pkern/k...@db.debian.org signature.asc Description: Digital signature
Bug#659541: Please enable autobuild for upx-nrv
Ansgar Burchardt wrote: The source for upx itself is provided on the upstream website (and upx-ucl package is built from it), source for NRV is not available. http://www.gnu.org/licenses/gpl-faq.html#UnchangedJustBinary The source for upx is distributed in upx-ucl source package, isn't this enough? Sure, but nobody else can redistribute the resulting binaries unless they do get special permission (the GPL doesn't allow this, see above). Quoting http://upx.sourceforge.net: All Rights Reserved. This program may be used freely, and you are welcome to redistribute and/or modify it under certain conditions. Also I've just found a mail from Mar 23th, 2011 from upx upstream author (it was also CC'ed to nonf...@release.debian.org, its message-id is 4d90580f.9050...@oberhumer.com) Robert, upx-nrv is in Debian more than 10 years, and we had dozens of mails with the maintainers discussing all the legal implications back in 2000. I have no idea where all this info and our conclusions are available/archived, though. Cheers, Markus http://lists.debian.org/cgi-bin/search?query=upx+license shows that there were some discussions regarding upx licensing in the past. It seems however all of them refer to the ucl version. I cannot find any clues if the conclusions are applicable to the nrv version or not, but there is one thing I'm pretty sure - the upx license hasn't changed at all since upx-nrv was allowed into Debian 12 years ago. I cannot understand why we still have issue with it, and moreover I have no idea how to solve the issue once and forever. Regards, Robert signature.asc Description: OpenPGP digital signature
Bug#659541: Please enable autobuild for upx-nrv
Luca Falavigna wrote: Please follow the instructions listed here: http://lists.debian.org/debian-devel-announce/2006/11/msg00012.html I think I've already requested this some time ago, but than forgotten about it. Anyway, let me follow the points from the above page: send a signed email to nonf...@release.debian.net describing which package and why the license is ok; The package is upx-nrv, and it's license allow redistributing or modifying the program under GNU GPL with a special exception granted for compressed executables. describe the fact that the package is autobuildable in debian/copyright, and to contact nonf...@release.debian.net before changing that; upx-nrv build process consists basically of the two main steps (not counting the standard ones like installing docs or building deb package): 1. unpacking the upx binary (i.e. ./upx -d upx) 2. installing the uncompressed binary (i.e. cp upx /usr/bin/upx-nrv) and I believe the commands can be run on autobuilders. I haven't mentioned this in copyright file yet though. include the header XS-Autobuild: yes in the source section of your debian/control file. Already done. Regards, robert signature.asc Description: OpenPGP digital signature
Bug#659541: Please enable autobuild for upx-nrv
Robert Luberda rob...@debian.org writes: The package is upx-nrv, and it's license allow redistributing or modifying the program under GNU GPL with a special exception granted for compressed executables. If it's licensed under the GPL: where is the source? And how can you link it against a non-free library and distribute the resulting binary? Regards, Ansgar -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#659541: Please enable autobuild for upx-nrv
Ansgar Burchardt wrote: Hi, Robert Luberda rob...@debian.org writes: The package is upx-nrv, and it's license allow redistributing or modifying the program under GNU GPL with a special exception granted for compressed executables. If it's licensed under the GPL: where is the source? The source for upx itself is provided on the upstream website (and upx-ucl package is built from it), source for NRV is not available. And how can you link it against a non-free library and distribute the resulting binary? NRV library is written by the same authors, so I assume they can link their upx binaries with their library. Regards, robert signature.asc Description: OpenPGP digital signature
