Debian Bug report logs - #524566
fluidsynth: sf2/COPYRIGHT is not DFSG

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Bart Martens <bartm@debian.org>

To: submit@bugs.debian.org

Subject: fluidsynth: sf2/COPYRIGHT is not DFSG

Date: Sat, 18 Apr 2009 08:44:04 +0200

Package: fluidsynth
Version: 1.0.8-2
Severity: serious

The file fluidsynth_1.0.8.orig.tar.gz in Debian contains these files:

sf2/VintageDreamsWaves-v2.sf2
sf2/Makefile.in
sf2/Makefile.am
sf2/COPYRIGHT

The license in sf2/COPYRIGHT contains "It is not altered, edited,
modified, ripped, or converted to other formats, except for private use
only".

Message #10 received at 524566@bugs.debian.org (full text, mbox, reply):

From: David Henningsson <launchpad.web@epost.diwic.se>

To: 524566@bugs.debian.org

Subject: Re: Bug#524566: fluidsynth: sf2/COPYRIGHT is not DFSG

Date: Sat, 18 Apr 2009 13:09:03 +0200

Bart Martens skrev:
> Package: fluidsynth
> Version: 1.0.8-2
> Severity: serious
> 
> The file fluidsynth_1.0.8.orig.tar.gz in Debian contains these files:
> 
> sf2/VintageDreamsWaves-v2.sf2
> sf2/Makefile.in
> sf2/Makefile.am
> sf2/COPYRIGHT
> 
> The license in sf2/COPYRIGHT contains "It is not altered, edited,
> modified, ripped, or converted to other formats, except for private use
> only".

In addition, the fluidsynth-v10-devdoc.xml is licensed under the
Creative Commons Attribution License, which is non-DFSG according to
http://wiki.debian.org/DFSGLicenses

Message #19 received at 524566@bugs.debian.org (full text, mbox, reply):

From: David Henningsson <launchpad.web@epost.diwic.se>

To: debian-release@lists.debian.org

Cc: 524566@bugs.debian.org

Subject: Non-DFSG files distributed in fluidsynth package

Date: Sun, 19 Apr 2009 14:03:19 +0200

Hello Release team,

while working on adopting my first package (fluidsynth), non-DFSG files
were discovered in all releases of fluidsynth, both unstable, testing,
stable and oldstable. (bug: #524566)

The non-DFSG files is a soundfont and some documentation, and is only
included in the upstream tarball, so no binary packages are affected.

I could use some advice on how to proceed, and possibly some assistance
as well.

Thanks,
  David Henningsson

Message #24 received at 524566@bugs.debian.org (full text, mbox, reply):

From: David Henningsson <launchpad.web@epost.diwic.se>

To: 524566@bugs.debian.org

Subject: doc/example.sf2 tainted as well

Date: Mon, 20 Apr 2009 07:14:26 +0200

It seems like doc/example.sf2 is ripped from VintageWavesDreams-v2.sf2.
This makes this problem worse since

1) This is not allowed according to VintageWavesDreams-v2.sf2's license

2) doc/example.sf2 is distributed as a part of the binary package
libfluidsynth-dev

Reference: http://lists.gnu.org/archive/html/fluid-dev/2009-04/msg00081.html

Message #29 received at 524566@bugs.debian.org (full text, mbox, reply):

From: Luk Claes <luk@debian.org>

To: David Henningsson <launchpad.web@epost.diwic.se>

Cc: debian-release@lists.debian.org, 524566@bugs.debian.org

Subject: Re: Non-DFSG files distributed in fluidsynth package

Date: Wed, 22 Apr 2009 09:00:00 +0200

David Henningsson wrote:
> Hello Release team,
> 
> while working on adopting my first package (fluidsynth), non-DFSG files
> were discovered in all releases of fluidsynth, both unstable, testing,
> stable and oldstable. (bug: #524566)
> 
> The non-DFSG files is a soundfont and some documentation, and is only
> included in the upstream tarball, so no binary packages are affected.
> 
> I could use some advice on how to proceed, and possibly some assistance
> as well.

I would propose to fix it first in unstable (by repacking upstream 
tarball by removing the files an recreating the tarball and using 
another upstream version in debian/changelog like adding .dfsg.1). If 
that worked out ok, feel free to do similar things for the version in 
stable and oldstable.

Cheers

Luk

Message #34 received at 524566@bugs.debian.org (full text, mbox, reply):

From: David Henningsson <launchpad.web@epost.diwic.se>

To: 524566@bugs.debian.org, 527410@bugs.debian.org, 524066@bugs.debian.org

Subject: Bug fixed in mentor's repository

Date: Thu, 14 May 2009 07:37:23 +0200

A fixed version has been available for a while now, and it is waiting
for a sponsor. The fixed version can be found at:

http://mentors.debian.net/debian/pool/main/f/fluidsynth/

If you want to see this bug fixed, please consider testing and/or
sponsoring this upload. Thank you!

Message #39 received at 524566-close@bugs.debian.org (full text, mbox, reply):

From: Ralf Treinen <treinen@debian.org>

To: 524566-close@bugs.debian.org

Subject: Bug#524566: fixed in fluidsynth 1.0.9+dfsg-1

Date: Thu, 21 May 2009 09:47:05 +0000

Source: fluidsynth
Source-Version: 1.0.9+dfsg-1

We believe that the bug you reported is fixed in the latest version of
fluidsynth, which is due to be installed in the Debian FTP archive:

fluidsynth_1.0.9+dfsg-1.diff.gz
  to pool/main/f/fluidsynth/fluidsynth_1.0.9+dfsg-1.diff.gz
fluidsynth_1.0.9+dfsg-1.dsc
  to pool/main/f/fluidsynth/fluidsynth_1.0.9+dfsg-1.dsc
fluidsynth_1.0.9+dfsg-1_amd64.deb
  to pool/main/f/fluidsynth/fluidsynth_1.0.9+dfsg-1_amd64.deb
fluidsynth_1.0.9+dfsg.orig.tar.gz
  to pool/main/f/fluidsynth/fluidsynth_1.0.9+dfsg.orig.tar.gz
libfluidsynth-dev_1.0.9+dfsg-1_amd64.deb
  to pool/main/f/fluidsynth/libfluidsynth-dev_1.0.9+dfsg-1_amd64.deb
libfluidsynth1_1.0.9+dfsg-1_amd64.deb
  to pool/main/f/fluidsynth/libfluidsynth1_1.0.9+dfsg-1_amd64.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 524566@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Ralf Treinen <treinen@debian.org> (supplier of updated fluidsynth package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Thu, 21 May 2009 10:22:08 +0200
Source: fluidsynth
Binary: fluidsynth libfluidsynth1 libfluidsynth-dev
Architecture: source amd64
Version: 1.0.9+dfsg-1
Distribution: unstable
Urgency: low
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Ralf Treinen <treinen@debian.org>
Description: 
 fluidsynth - Real-time MIDI software synthesizer
 libfluidsynth-dev - Real-time MIDI software synthesizer (development files)
 libfluidsynth1 - Real-time MIDI software synthesizer (runtime library)
Closes: 524066 524566 527410 527832
Changes: 
 fluidsynth (1.0.9+dfsg-1) unstable; urgency=low
 .
   [ Ralf Treinen ]
   * QA upload (sponsoring David Henningsson).
 .
   [ David Henningsson <launchpad.web@epost.diwic.se> ]
   * New upstream release (Closes: #524066)
   * Remove non-DFSG soundfonts and documentation (Closes: #524566)
   * Depend on libjack-dev instead of libjack0.100.0-dev (Closes: #527410)
   * Optionally depend on lash instead of ladcca
   * Rewrite debian/copyright file, now it includes exact copyright notices
   * Fix build problem with new libtool (moved ltmain.sh) (Closes: #527832)
   * Erase autotools files in debian/rules to avoid large diff.gz
   * Remove unused debian/manpages file
   * Keep upstream's config.{sub,guess}, since they're recent enough
   * Bump Standards-Version to 3.8.1, no changes required
Checksums-Sha1: 
 88b7099c9cad511739980029113eaa3aa88db7b1 1211 fluidsynth_1.0.9+dfsg-1.dsc
 3b3bbd717001b9f24161de4423c92be7111ff5ac 620009 fluidsynth_1.0.9+dfsg.orig.tar.gz
 fd7598fdd8d77cd6a34d2eed538aa060f9e55066 6635 fluidsynth_1.0.9+dfsg-1.diff.gz
 3341b16dedfff7d6294c02d99d708579b125e8f8 42478 fluidsynth_1.0.9+dfsg-1_amd64.deb
 8211875cce49c63569dd8f4868002ce6c7c0322d 175878 libfluidsynth1_1.0.9+dfsg-1_amd64.deb
 04878c22304d4ee1e59d027a2cdba68022c0094a 225896 libfluidsynth-dev_1.0.9+dfsg-1_amd64.deb
Checksums-Sha256: 
 68e3ea99f008dc1472a34bef54976840a32b12167886a31bcc7ac1e30c385636 1211 fluidsynth_1.0.9+dfsg-1.dsc
 e22a122e22629c24eb68c440ce4a32181276b7b8e0ef59ca6364968935b3f365 620009 fluidsynth_1.0.9+dfsg.orig.tar.gz
 103b11e7b213da2c3fa73d63cddaf8adb2c3897468d9e6e0911d4022340084e7 6635 fluidsynth_1.0.9+dfsg-1.diff.gz
 d369663441d9d81482e7787baa77a3800c2a8814abf9fc5308d3a32890156fa3 42478 fluidsynth_1.0.9+dfsg-1_amd64.deb
 811078efc57c97d047d5e9c8e6b6e4374e4e1c3aab2cb52d64387a5b863e7048 175878 libfluidsynth1_1.0.9+dfsg-1_amd64.deb
 87c4aa311ea1d238c0b038f3294f46ee1b21bf3f9db9b5d37a24f95c6cfd89fa 225896 libfluidsynth-dev_1.0.9+dfsg-1_amd64.deb
Files: 
 7c6bf39692954e2e6a6694956a79031c 1211 sound optional fluidsynth_1.0.9+dfsg-1.dsc
 d6614bc00a306d4a4679b9e0cfb419e7 620009 sound optional fluidsynth_1.0.9+dfsg.orig.tar.gz
 63444d5552f0dc6f90fb5eb5cadd340a 6635 sound optional fluidsynth_1.0.9+dfsg-1.diff.gz
 499383114923000f743d1aa7c9e6cbde 42478 sound optional fluidsynth_1.0.9+dfsg-1_amd64.deb
 e137801be4bc00bf41090840f0b4984f 175878 libs optional libfluidsynth1_1.0.9+dfsg-1_amd64.deb
 7305e94d84efa955f2e3cdc6ae44d85a 225896 libdevel optional libfluidsynth-dev_1.0.9+dfsg-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFKFSB7tzWmSeC6BMERAkVtAJ98DpG/kDHffWEYix41htbdCHkjoQCg0ekS
EmqupVXNwVjIxRy+9p5Kui4=
=jyBD
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.