Bug#516784: Source package contains non-free IETF RFC/I-D
Severity: serious
Package: openoffice.org
Version: 1:3.0.1-2
User: debian-release@lists.debian.org
Usertags: nonfree-doc rfc
Hi!
This source package contains the following files from the
IETF under non-free license terms:
openoffice.org-3.0.1/ooo-build/src/OOo_3.0.1rc2_rev2_src_extensions.tar.bz2:OOO300_m15/jfreereport/download/liblayout.zip:liblayout/resource/rfc1345.txt
I looked into this more carefully, and it seems the openoffice source
package contains a copy of liblayout 0.2.8 which is also packaged
separately in debian:
http://packages.debian.org/lenny/liblayout-java
The problem mentioned below has been fixed for that package already, see:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=451215
It may be that the best way to resolve this problem is to make
openoffice use the liblayout-java package which is already part of
Debian, rather than duplicating this code?
Btw, there seems to be more code duplication going on in the same
directory:
-rw-r--r-- 1 debrfc debrfc 863104 2008-01-14 16:24 core.zip
drwxr-xr-x 2 debrfc debrfc 4096 2009-01-22 14:27 CVS
-rw-r--r-- 1 debrfc debrfc 93172 2008-01-14 16:25 flute.zip
-rw-r--r-- 1 debrfc debrfc 784781 2008-01-14 16:25 jcommon-1.0.10.zip
-rw-r--r-- 1 debrfc debrfc 50704 2008-01-14 16:25 jcommon-serializer.zip
-rw-r--r-- 1 debrfc debrfc 1360748 2008-01-14 16:26 libfonts.zip
-rw-r--r-- 1 debrfc debrfc 499594 2008-01-14 16:26 libformula.zip
drwxr-xr-x 8 debrfc debrfc 4096 2007-10-18 08:21 liblayout
-rw-r--r-- 1 debrfc debrfc 1556974 2008-01-14 16:27 liblayout.zip
-rw-r--r-- 1 debrfc debrfc 142459 2008-01-14 16:27 libloader.zip
-rw-r--r-- 1 debrfc debrfc 62488 2008-01-14 16:27 librepository.zip
-rw-r--r-- 1 debrfc debrfc 93651 2008-01-14 16:28 libxml.zip
-rw-r--r-- 1 debrfc debrfc 153157 2008-01-14 16:28 sacjava-1.3.zip
At least libloader.zip seems to also be part of debian:
http://packages.debian.org/lenny/libloader-java
I tried to search the BTS for bugs about this duplication, but were
unable to find any.
The license on RFC/I-Ds is not DFSG-free, see:
* http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=199810
* http://release.debian.org/removing-non-free-documentation
* http://wiki.debian.org/NonFreeIETFDocuments
The lenny release policy says binary and source packages must each be free:
* http://release.debian.org/lenny/rc_policy.txt
The severity is serious, because this violates the Debian policy:
* http://www.debian.org/doc/debian-policy/ch-archive.html#s-dfsg
There are (at least) three ways to fix this problem. In order of
preference:
1. Ask the author of the RFC to re-license the RFC under a free
license. A template for this e-mail request can be found at
http://wiki.debian.org/NonFreeIETFDocuments
2. Remove the non-free material from the source, e.g., by re-packaging
the upstream archive and adding 'dfsg' to the Debian package
version name.
3. Move the package to non-free.
General discussions are kindly requested to take place on debian-legal
or debian-devel in the thread with Subject: "Non-free IETF RFC/I-Ds in
source packages".
Thanks,
Simon
Reply to: