Debian Bug report logs - #499471
PHP5 - ext/standard/rand.c is not dfsg conform

version graph

Package: php4; Maintainer for php4 is (unknown);

Reported by: Jan Wagner <waja@cyconet.org>

Date: Thu, 11 Sep 2008 14:45:01 UTC

Severity: serious

Found in version 4:4.1.2-1

Fixed in version 6:4.4.6-2+rm

Done: Marco Rodrigues <gothicx@gmail.com>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#498621; Package php5. (full text, mbox, link).


Acknowledgement sent to Jan Wagner <waja@cyconet.org>:
New Bug report received and forwarded. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Jan Wagner <waja@cyconet.org>
To: submit@bugs.debian.org
Cc: debian-legal@lists.debian.org
Subject: PHP5 - ext/standard/rand.c is not dfsg conform
Date: Thu, 11 Sep 2008 16:38:08 +0200
[Message part 1 (text/plain, inline)]
Package: php5
Version: 5.2.0-8
Severity: serious

Please have a look into line 144-148 of ext/standard/rand.c:

"        When you use this, send an email to: matumoto@math.keio.ac.jp
    with an appropriate reference to your work.

        It would be nice to CC: rjwagner@writeme.com and 
Cokus@math.washington.edu
        when you write."

This is not conform to the DFSG, even in 5.2.6-3. Please keep me updated, 
since the same code is also used in the latest php-suhosin upstream source and 
is preventing fixing some serious bugs in lenny.

Looking at http://www.ibm.com/developerworks/rational/library/4301.html, there 
is a different license:

/* Copyright (C) 1997, 1999 Makoto Matsumoto and Takuji Nishimura. */
/* Any feedback is very welcome. For any question, comments,       */
/* see http://www.math.keio.ac.jp/matumoto/emt.html or email       */
/* matumoto@math.keio.ac.jp                                        */
Thanks and with kind regards, Jan.
-- 
Never write mail to <waja@spamfalle.info>, you have been warned!
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GIT d-- s+: a- C+++ UL++++ P+ L+++ E- W+++ N+++ o++ K++ w--- O M V- PS PE
Y++ PGP++ t-- 5 X R tv- b+ DI- D++ G++ e++ h-- r+++ y+++
------END GEEK CODE BLOCK------
[signature.asc (application/pgp-signature, inline)]

Information forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#498621; Package php5. (full text, mbox, link).


Acknowledgement sent to "Ondřej Surý" <ondrej@sury.org>:
Extra info received and forwarded to list. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (full text, mbox, link).


Message #10 received at 498621@bugs.debian.org (full text, mbox, reply):

From: "Ondřej Surý" <ondrej@sury.org>
To: "Jan Wagner" <waja@cyconet.org>, 498621@bugs.debian.org
Cc: debian-legal@lists.debian.org
Subject: Re: [php-maint] Bug#498621: PHP5 - ext/standard/rand.c is not dfsg conform
Date: Thu, 11 Sep 2008 17:02:47 +0200
Author homepage: http://www.math.sci.hiroshima-u.ac.jp/~m-mat/MT/emt.html

Current license of the code
http://www.math.sci.hiroshima-u.ac.jp/~m-mat/MT/MT2002/elicense.html

So looks like documentation bug.

Ondrej.

2008/9/11 Jan Wagner <waja@cyconet.org>:
> Package: php5
> Version: 5.2.0-8
> Severity: serious
>
> Please have a look into line 144-148 of ext/standard/rand.c:
>
> "        When you use this, send an email to: matumoto@math.keio.ac.jp
>    with an appropriate reference to your work.
>
>        It would be nice to CC: rjwagner@writeme.com and
> Cokus@math.washington.edu
>        when you write."
>
> This is not conform to the DFSG, even in 5.2.6-3. Please keep me updated,
> since the same code is also used in the latest php-suhosin upstream source and
> is preventing fixing some serious bugs in lenny.
>
> Looking at http://www.ibm.com/developerworks/rational/library/4301.html, there
> is a different license:
>
> /* Copyright (C) 1997, 1999 Makoto Matsumoto and Takuji Nishimura. */
> /* Any feedback is very welcome. For any question, comments,       */
> /* see http://www.math.keio.ac.jp/matumoto/emt.html or email       */
> /* matumoto@math.keio.ac.jp                                        */
> Thanks and with kind regards, Jan.
> --
> Never write mail to <waja@spamfalle.info>, you have been warned!
> -----BEGIN GEEK CODE BLOCK-----
> Version: 3.1
> GIT d-- s+: a- C+++ UL++++ P+ L+++ E- W+++ N+++ o++ K++ w--- O M V- PS PE
> Y++ PGP++ t-- 5 X R tv- b+ DI- D++ G++ e++ h-- r+++ y+++
> ------END GEEK CODE BLOCK------
>
> _______________________________________________
> pkg-php-maint mailing list
> pkg-php-maint@lists.alioth.debian.org
> http://lists.alioth.debian.org/mailman/listinfo/pkg-php-maint
>



-- 
Ondřej Surý <ondrej@sury.org>

Information forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#498621; Package php5. (full text, mbox, link).


Acknowledgement sent to Jan Wagner <waja@cyconet.org>:
Extra info received and forwarded to list. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (full text, mbox, link).


Message #15 received at 498621@bugs.debian.org (full text, mbox, reply):

From: Jan Wagner <waja@cyconet.org>
To: "Ondřej Surý" <ondrej@sury.org>
Cc: 498621@bugs.debian.org, debian-legal@lists.debian.org
Subject: Re: [php-maint] Bug#498621: PHP5 - ext/standard/rand.c is not dfsg conform
Date: Thu, 11 Sep 2008 17:23:16 +0200
[Message part 1 (text/plain, inline)]
On Thursday 11 September 2008, Ondřej Surý wrote:
> Author homepage: http://www.math.sci.hiroshima-u.ac.jp/~m-mat/MT/emt.html
>
> Current license of the code
> http://www.math.sci.hiroshima-u.ac.jp/~m-mat/MT/MT2002/elicense.html
>
> So looks like documentation bug.

Okay ... but how to process here? The question is, on what version did Shawn 
Cokus base his work:

   The code as Shawn received it included the following notice:

     Copyright (C) 1997 Makoto Matsumoto and Takuji Nishimura.  When
     you use this, send an e-mail to <matumoto@math.keio.ac.jp> with
     an appropriate reference to your work.

   It would be nice to CC: <Cokus@math.washington.edu> when you write.

With kind regards, Jan
-- 
Never write mail to <waja@spamfalle.info>, you have been warned!
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GIT d-- s+: a- C+++ UL++++ P+ L+++ E- W+++ N+++ o++ K++ w--- O M V- PS PE
Y++ PGP++ t-- 5 X R tv- b+ DI- D++ G++ e++ h-- r+++ y+++
------END GEEK CODE BLOCK------
[signature.asc (application/pgp-signature, inline)]

Bug marked as found in version 4:4.1.2-1. Request was from Raphael Geissert <atomo64@gmail.com> to control@bugs.debian.org. (Fri, 19 Sep 2008 00:54:03 GMT) (full text, mbox, link).


Bug 498621 cloned as bug 499471. Request was from Raphael Geissert <atomo64@gmail.com> to control@bugs.debian.org. (Fri, 19 Sep 2008 00:54:03 GMT) (full text, mbox, link).


Bug reassigned from package `php5' to `php4'. Request was from Raphael Geissert <atomo64@gmail.com> to control@bugs.debian.org. (Fri, 19 Sep 2008 00:54:05 GMT) (full text, mbox, link).


Bug marked as found in version 4:4.1.2-1. Request was from Raphael Geissert <atomo64@gmail.com> to control@bugs.debian.org. (Fri, 19 Sep 2008 00:54:06 GMT) (full text, mbox, link).


Reply sent to Marco Rodrigues <gothicx@gmail.com>:
You have taken responsibility. (Fri, 26 Mar 2010 10:33:17 GMT) (full text, mbox, link).


Notification sent to Jan Wagner <waja@cyconet.org>:
Bug acknowledged by developer. (Fri, 26 Mar 2010 10:33:17 GMT) (full text, mbox, link).


Message #28 received at 499471-done@bugs.debian.org (full text, mbox, reply):

From: Marco Rodrigues <gothicx@gmail.com>
To: 499471-done@bugs.debian.org
Subject: Package php4 has been removed from Debian
Date: Wed, 24 Mar 2010 20:20:17 +0000 (WET)
Version: 6:4.4.6-2+rm

You filed the bug http://bugs.debian.org/499471 in Debian BTS
against the package php4. I'm closing it at *unstable*, but it will
remain open for older distributions.

For more information about this package's removal, read
http://bugs.debian.org/428266. That bug might give the reasons why
this package was removed and suggestions of possible replacements.

Don't hesitate to reply to this mail if you have any question.

Thank you for your contribution to Debian.

--
Marco Rodrigues




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sat, 24 Apr 2010 07:33:12 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Sun Jul 2 02:37:10 2023; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.