Debian Bug report logs -
#499471
PHP5 - ext/standard/rand.c is not dfsg conform
Reported by: Jan Wagner <waja@cyconet.org>
Date: Thu, 11 Sep 2008 14:45:01 UTC
Severity: serious
Found in version 4:4.1.2-1
Fixed in version 6:4.4.6-2+rm
Done: Marco Rodrigues <gothicx@gmail.com>
Bug is archived. No further changes may be made.
Toggle useless messages
Report forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#498621; Package php5.
(full text, mbox, link).
Acknowledgement sent to Jan Wagner <waja@cyconet.org>:
New Bug report received and forwarded. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>.
(full text, mbox, link).
Message #5 received at submit@bugs.debian.org (full text, mbox, reply):
[Message part 1 (text/plain, inline)]
Package: php5
Version: 5.2.0-8
Severity: serious
Please have a look into line 144-148 of ext/standard/rand.c:
" When you use this, send an email to: matumoto@math.keio.ac.jp
with an appropriate reference to your work.
It would be nice to CC: rjwagner@writeme.com and
Cokus@math.washington.edu
when you write."
This is not conform to the DFSG, even in 5.2.6-3. Please keep me updated,
since the same code is also used in the latest php-suhosin upstream source and
is preventing fixing some serious bugs in lenny.
Looking at http://www.ibm.com/developerworks/rational/library/4301.html, there
is a different license:
/* Copyright (C) 1997, 1999 Makoto Matsumoto and Takuji Nishimura. */
/* Any feedback is very welcome. For any question, comments, */
/* see http://www.math.keio.ac.jp/matumoto/emt.html or email */
/* matumoto@math.keio.ac.jp */
Thanks and with kind regards, Jan.
--
Never write mail to <waja@spamfalle.info>, you have been warned!
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GIT d-- s+: a- C+++ UL++++ P+ L+++ E- W+++ N+++ o++ K++ w--- O M V- PS PE
Y++ PGP++ t-- 5 X R tv- b+ DI- D++ G++ e++ h-- r+++ y+++
------END GEEK CODE BLOCK------
[signature.asc (application/pgp-signature, inline)]
Information forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#498621; Package php5.
(full text, mbox, link).
Acknowledgement sent to "Ondřej Surý" <ondrej@sury.org>:
Extra info received and forwarded to list. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>.
(full text, mbox, link).
Message #10 received at 498621@bugs.debian.org (full text, mbox, reply):
Author homepage: http://www.math.sci.hiroshima-u.ac.jp/~m-mat/MT/emt.html
Current license of the code
http://www.math.sci.hiroshima-u.ac.jp/~m-mat/MT/MT2002/elicense.html
So looks like documentation bug.
Ondrej.
2008/9/11 Jan Wagner <waja@cyconet.org>:
> Package: php5
> Version: 5.2.0-8
> Severity: serious
>
> Please have a look into line 144-148 of ext/standard/rand.c:
>
> " When you use this, send an email to: matumoto@math.keio.ac.jp
> with an appropriate reference to your work.
>
> It would be nice to CC: rjwagner@writeme.com and
> Cokus@math.washington.edu
> when you write."
>
> This is not conform to the DFSG, even in 5.2.6-3. Please keep me updated,
> since the same code is also used in the latest php-suhosin upstream source and
> is preventing fixing some serious bugs in lenny.
>
> Looking at http://www.ibm.com/developerworks/rational/library/4301.html, there
> is a different license:
>
> /* Copyright (C) 1997, 1999 Makoto Matsumoto and Takuji Nishimura. */
> /* Any feedback is very welcome. For any question, comments, */
> /* see http://www.math.keio.ac.jp/matumoto/emt.html or email */
> /* matumoto@math.keio.ac.jp */
> Thanks and with kind regards, Jan.
> --
> Never write mail to <waja@spamfalle.info>, you have been warned!
> -----BEGIN GEEK CODE BLOCK-----
> Version: 3.1
> GIT d-- s+: a- C+++ UL++++ P+ L+++ E- W+++ N+++ o++ K++ w--- O M V- PS PE
> Y++ PGP++ t-- 5 X R tv- b+ DI- D++ G++ e++ h-- r+++ y+++
> ------END GEEK CODE BLOCK------
>
> _______________________________________________
> pkg-php-maint mailing list
> pkg-php-maint@lists.alioth.debian.org
> http://lists.alioth.debian.org/mailman/listinfo/pkg-php-maint
>
--
Ondřej Surý <ondrej@sury.org>
Information forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#498621; Package php5.
(full text, mbox, link).
Acknowledgement sent to Jan Wagner <waja@cyconet.org>:
Extra info received and forwarded to list. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>.
(full text, mbox, link).
Message #15 received at 498621@bugs.debian.org (full text, mbox, reply):
[Message part 1 (text/plain, inline)]
On Thursday 11 September 2008, Ondřej Surý wrote:
> Author homepage: http://www.math.sci.hiroshima-u.ac.jp/~m-mat/MT/emt.html
>
> Current license of the code
> http://www.math.sci.hiroshima-u.ac.jp/~m-mat/MT/MT2002/elicense.html
>
> So looks like documentation bug.
Okay ... but how to process here? The question is, on what version did Shawn
Cokus base his work:
The code as Shawn received it included the following notice:
Copyright (C) 1997 Makoto Matsumoto and Takuji Nishimura. When
you use this, send an e-mail to <matumoto@math.keio.ac.jp> with
an appropriate reference to your work.
It would be nice to CC: <Cokus@math.washington.edu> when you write.
With kind regards, Jan
--
Never write mail to <waja@spamfalle.info>, you have been warned!
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GIT d-- s+: a- C+++ UL++++ P+ L+++ E- W+++ N+++ o++ K++ w--- O M V- PS PE
Y++ PGP++ t-- 5 X R tv- b+ DI- D++ G++ e++ h-- r+++ y+++
------END GEEK CODE BLOCK------
[signature.asc (application/pgp-signature, inline)]
Bug marked as found in version 4:4.1.2-1.
Request was from Raphael Geissert <atomo64@gmail.com>
to control@bugs.debian.org.
(Fri, 19 Sep 2008 00:54:03 GMT) (full text, mbox, link).
Bug 498621 cloned as bug 499471.
Request was from Raphael Geissert <atomo64@gmail.com>
to control@bugs.debian.org.
(Fri, 19 Sep 2008 00:54:03 GMT) (full text, mbox, link).
Bug reassigned from package `php5' to `php4'.
Request was from Raphael Geissert <atomo64@gmail.com>
to control@bugs.debian.org.
(Fri, 19 Sep 2008 00:54:05 GMT) (full text, mbox, link).
Bug marked as found in version 4:4.1.2-1.
Request was from Raphael Geissert <atomo64@gmail.com>
to control@bugs.debian.org.
(Fri, 19 Sep 2008 00:54:06 GMT) (full text, mbox, link).
Reply sent
to Marco Rodrigues <gothicx@gmail.com>:
You have taken responsibility.
(Fri, 26 Mar 2010 10:33:17 GMT) (full text, mbox, link).
Notification sent
to Jan Wagner <waja@cyconet.org>:
Bug acknowledged by developer.
(Fri, 26 Mar 2010 10:33:17 GMT) (full text, mbox, link).
Message #28 received at 499471-done@bugs.debian.org (full text, mbox, reply):
Version: 6:4.4.6-2+rm
You filed the bug http://bugs.debian.org/499471 in Debian BTS
against the package php4. I'm closing it at *unstable*, but it will
remain open for older distributions.
For more information about this package's removal, read
http://bugs.debian.org/428266. That bug might give the reasons why
this package was removed and suggestions of possible replacements.
Don't hesitate to reply to this mail if you have any question.
Thank you for your contribution to Debian.
--
Marco Rodrigues
Bug archived.
Request was from Debbugs Internal Request <owner@bugs.debian.org>
to internal_control@bugs.debian.org.
(Sat, 24 Apr 2010 07:33:12 GMT) (full text, mbox, link).
Send a report that this bug log contains spam.
Debian bug tracking system administrator <owner@bugs.debian.org>.
Last modified:
Sun Jul 2 02:37:10 2023;
Machine Name:
buxtehude
Debian Bug tracking system
Debbugs is free software and licensed under the terms of the GNU
Public License version 2. The current version can be obtained
from https://bugs.debian.org/debbugs-source/.
Copyright © 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson,
2005-2017 Don Armstrong, and many other contributors.