Debian Bug report logs - #674940
Source package contains non-free IETF RFC/I-D

version graph

Package: libogg; Maintainer for libogg is Ron Lee <ron@debian.org>;

Reported by: Simon Josefsson <simon@josefsson.org>

Date: Mon, 28 May 2012 20:18:02 UTC

Severity: serious

Found in version 1.3.0-2

Done: Ron <ron@debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Ron Lee <ron@debian.org>:
Bug#674940; Package libogg. (Mon, 28 May 2012 20:18:04 GMT) Full text and rfc822 format available.

Acknowledgement sent to Simon Josefsson <simon@josefsson.org>:
New Bug report received and forwarded. Copy sent to Ron Lee <ron@debian.org>. (Mon, 28 May 2012 20:18:04 GMT) Full text and rfc822 format available.

Message #5 received at submit@bugs.debian.org (full text, mbox):

From: Simon Josefsson <simon@josefsson.org>
To: submit@bugs.debian.org
Subject: Source package contains non-free IETF RFC/I-D
Date: Mon, 28 May 2012 22:14:34 +0200
Severity: serious
Package: libogg
Version: 1.3.0-2
User: debian-release@lists.debian.org
Usertags: nonfree-doc rfc

Hi!

This source package contains the following files from the
IETF under non-free license terms:

  libogg-1.3.0/doc/rfc3533.txt
  libogg-1.3.0/doc/rfc5334.txt

The license on RFC/I-Ds is not DFSG-free, see:

 * http://wiki.debian.org/NonFreeIETFDocuments
 * http://bugs.debian.org/199810

According to the squeeze/wheezy release policy, source packages must be
DFSG-free, see:

 * http://release.debian.org/squeeze/rc_policy.txt
 * http://release.debian.org/wheezy/rc_policy.txt

The severity is serious, because this violates the Debian policy:

 * http://www.debian.org/doc/debian-policy/ch-archive.html#s-dfsg

There are (at least) three ways to fix this problem.  In order of
preference:

1. Ask the author of the RFC to re-license the RFC under a free
   license.  A template for this e-mail request can be found at
   http://wiki.debian.org/NonFreeIETFDocuments

2. Remove the non-free material from the source, e.g., by re-packaging
   the upstream archive and adding 'dfsg' to the Debian package
   version name.

3. Move the package to non-free.

General discussions are kindly requested to take place on debian-legal
or debian-devel in the thread with Subject: "Non-free IETF RFC/I-Ds in
source packages".

Thanks,
Simon




Reply sent to Ron <ron@debian.org>:
You have taken responsibility. (Mon, 28 May 2012 20:57:21 GMT) Full text and rfc822 format available.

Notification sent to Simon Josefsson <simon@josefsson.org>:
Bug acknowledged by developer. (Mon, 28 May 2012 20:57:21 GMT) Full text and rfc822 format available.

Message #10 received at 674940-done@bugs.debian.org (full text, mbox):

From: Ron <ron@debian.org>
To: Simon Josefsson <simon@josefsson.org>, 674940-done@bugs.debian.org
Subject: Re: Bug#674940: Source package contains non-free IETF RFC/I-D
Date: Tue, 29 May 2012 06:16:24 +0930
Hi Simon,

I had been wondering if you'd actually look at the package before
sending another one of these :)  Please update your whitelist,
since they were blindly and wrongly removed by the previous
maintainers the last time you sent one ...

See section 12 in RFC 5334, you might recognise the text there :)
For 3533 we have an extra grant from the author (and apparently
always had that too, but it got lost sometime before me taking over).

I even noted in the changelog that I was explicitly putting them
back because the legwork to ensure we could had been done now ...

 Thanks!
 Ron


On Mon, May 28, 2012 at 10:14:34PM +0200, Simon Josefsson wrote:
> Severity: serious
> Package: libogg
> Version: 1.3.0-2
> User: debian-release@lists.debian.org
> Usertags: nonfree-doc rfc
> 
> Hi!
> 
> This source package contains the following files from the
> IETF under non-free license terms:
> 
>   libogg-1.3.0/doc/rfc3533.txt
>   libogg-1.3.0/doc/rfc5334.txt
> 
> The license on RFC/I-Ds is not DFSG-free, see:
> 
>  * http://wiki.debian.org/NonFreeIETFDocuments
>  * http://bugs.debian.org/199810
> 
> According to the squeeze/wheezy release policy, source packages must be
> DFSG-free, see:
> 
>  * http://release.debian.org/squeeze/rc_policy.txt
>  * http://release.debian.org/wheezy/rc_policy.txt
> 
> The severity is serious, because this violates the Debian policy:
> 
>  * http://www.debian.org/doc/debian-policy/ch-archive.html#s-dfsg
> 
> There are (at least) three ways to fix this problem.  In order of
> preference:
> 
> 1. Ask the author of the RFC to re-license the RFC under a free
>    license.  A template for this e-mail request can be found at
>    http://wiki.debian.org/NonFreeIETFDocuments
> 
> 2. Remove the non-free material from the source, e.g., by re-packaging
>    the upstream archive and adding 'dfsg' to the Debian package
>    version name.
> 
> 3. Move the package to non-free.
> 
> General discussions are kindly requested to take place on debian-legal
> or debian-devel in the thread with Subject: "Non-free IETF RFC/I-Ds in
> source packages".
> 
> Thanks,
> Simon
> 
> 




Message #11 received at 674940-done@bugs.debian.org (full text, mbox):

From: Simon Josefsson <simon@josefsson.org>
To: Ron <ron@debian.org>
Cc: 674940-done@bugs.debian.org
Subject: Re: Bug#674940: Source package contains non-free IETF RFC/I-D
Date: Tue, 29 May 2012 09:22:53 +0200
Ron <ron@debian.org> writes:

> Hi Simon,
>
> I had been wondering if you'd actually look at the package before
> sending another one of these :)  Please update your whitelist,
> since they were blindly and wrongly removed by the previous
> maintainers the last time you sent one ...
>
> See section 12 in RFC 5334, you might recognise the text there :)
> For 3533 we have an extra grant from the author (and apparently
> always had that too, but it got lost sometime before me taking over).
>
> I even noted in the changelog that I was explicitly putting them
> back because the legwork to ensure we could had been done now ...

Hi Ron,

Nice to see these RFCs with a better license!  I don't see the license
text from RFC 5334 reproduced in the debian/copyright file though, which
is where I looked last time, and the RFC 3533 re-licensing looks like a
recent effort.  I believe this was only the second false positive ever,
I've made a note about it on the wiki page.

It would be good if debian/copyright was updated to hold the RFC 5334
license, for completeness.

Thanks,
/Simon


>  Thanks!
>  Ron
>
>
> On Mon, May 28, 2012 at 10:14:34PM +0200, Simon Josefsson wrote:
>> Severity: serious
>> Package: libogg
>> Version: 1.3.0-2
>> User: debian-release@lists.debian.org
>> Usertags: nonfree-doc rfc
>> 
>> Hi!
>> 
>> This source package contains the following files from the
>> IETF under non-free license terms:
>> 
>>   libogg-1.3.0/doc/rfc3533.txt
>>   libogg-1.3.0/doc/rfc5334.txt
>> 
>> The license on RFC/I-Ds is not DFSG-free, see:
>> 
>>  * http://wiki.debian.org/NonFreeIETFDocuments
>>  * http://bugs.debian.org/199810
>> 
>> According to the squeeze/wheezy release policy, source packages must be
>> DFSG-free, see:
>> 
>>  * http://release.debian.org/squeeze/rc_policy.txt
>>  * http://release.debian.org/wheezy/rc_policy.txt
>> 
>> The severity is serious, because this violates the Debian policy:
>> 
>>  * http://www.debian.org/doc/debian-policy/ch-archive.html#s-dfsg
>> 
>> There are (at least) three ways to fix this problem.  In order of
>> preference:
>> 
>> 1. Ask the author of the RFC to re-license the RFC under a free
>>    license.  A template for this e-mail request can be found at
>>    http://wiki.debian.org/NonFreeIETFDocuments
>> 
>> 2. Remove the non-free material from the source, e.g., by re-packaging
>>    the upstream archive and adding 'dfsg' to the Debian package
>>    version name.
>> 
>> 3. Move the package to non-free.
>> 
>> General discussions are kindly requested to take place on debian-legal
>> or debian-devel in the thread with Subject: "Non-free IETF RFC/I-Ds in
>> source packages".
>> 
>> Thanks,
>> Simon
>> 
>> 




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Wed, 27 Jun 2012 07:38:53 GMT) Full text and rfc822 format available.

Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed Apr 16 08:01:34 2014; Machine Name: buxtehude.debian.org

Debian Bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.