[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#823100: marked as done (ghostscript: includes two files claimed to be under a non-free Unicode license)

Your message dated Fri, 18 Nov 2016 15:33:45 +0000
with message-id <E1c7lAf-000DIc-BK@fasolo.debian.org>
and subject line Bug#823100: fixed in ghostscript 9.20~dfsg-1~exp1
has caused the Debian Bug report #823100,
regarding ghostscript: includes two files claimed to be under a non-free Unicode license
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
823100: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823100
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: ghostscript
Version: 9.19~dfsg-1+b1
Severity: serious
Justification: Policy 2.2.1

Hello,
I noticed that two files included in the ghostscript source package
are documented in the debian/copyright file as distributed under
the terms of a non-free Unicode license.

The two files are:

  Files: base/ConvertUTF.c
   base/ConvertUTF.h
  Copyright: 2001-2004, Unicode, Inc
  License: Unicode

and the license text is claimed to be:

  License: Unicode
   This source code is provided as is by Unicode, Inc. No claims are made
   as to fitness for any particular purpose. No warranties of any kind are
   expressed or implied. The recipient agrees to determine applicability
   of information provided. If this file has been purchased on magnetic or
   optical media from Unicode, Inc., the sole remedy for any claim will be
   exchange of defective media within 90 days of receipt.
   .
   Limitations on Rights to Redistribute This Code
   .
   Unicode, Inc. hereby grants the right to freely use the information
   supplied in this file in the creation of products supporting the
   Unicode Standard, and to make copies of this file in any form for
   internal or external distribution as long as this notice remains
   attached.

At the very least, this license does not grant any permission
to modify the files (thus failing DFSG#3). Moreover, the license grant
seems to attempt to restrict use to "products supporting the Unicode
Standard" (thus failing DFSG#6).
See also
https://lists.debian.org/debian-legal/2015/12/msg00000.html
where an FTP Assitant confirmed that files which restrict "use to
only that of implementing a standard" are not fit for Debian main.

Therefore, the two files under discussion appear to be non-free.

However, this issue could possibly be easy to solve.
If Unicode Inc has published new versions of the two files in
more recent times, the updated versions should be under the
current unicode.org public license, as explained in
http://www.unicode.org/copyright.html#Exhibit1

Please check whether newer versions of those files are released
in one of the Unicode web site areas mentioned in the cited Exhibit1.
The newer versions could perhaps be used as replacements for the
non-free ones.

I hope this issue may be addressed soon.
Thanks for your time!

Bye.

--- End Message ---
--- Begin Message --- 
Source: ghostscript
Source-Version: 9.20~dfsg-1~exp1

We believe that the bug you reported is fixed in the latest version of
ghostscript, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 823100@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Jonas Smedegaard <dr@jones.dk> (supplier of updated ghostscript package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Fri, 18 Nov 2016 16:07:47 +0100
Source: ghostscript
Binary: ghostscript ghostscript-x ghostscript-doc libgs9 libgs9-common libgs-dev ghostscript-dbg
Architecture: source amd64 all
Version: 9.20~dfsg-1~exp1
Distribution: experimental
Urgency: medium
Maintainer: Debian Printing Team <debian-printing@lists.debian.org>
Changed-By: Jonas Smedegaard <dr@jones.dk>
Description:
 ghostscript - interpreter for the PostScript language and for PDF
 ghostscript-dbg - interpreter for the PostScript language and for PDF - Debug symbo
 ghostscript-doc - interpreter for the PostScript language and for PDF - Documentati
 ghostscript-x - interpreter for the PostScript language and for PDF - X11 support
 libgs-dev  - interpreter for the PostScript language and for PDF - Development
 libgs9     - interpreter for the PostScript language and for PDF - Library
 libgs9-common - interpreter for the PostScript language and for PDF - common file
Closes: 823100
Changes:
 ghostscript (9.20~dfsg-1~exp1) experimental; urgency=medium
 .
   [ upstream ]
   * New release.
 .
   [ Jonas Smedegaard ]
   * Avoid non-DFSG embedded code copy of ConvertUTF:
     + Avoid when repackaging.
     + Stop track ConvertUTF files in copyright file.
     + Add patches cherry-pricked upstream to improve Unicode handling in
       PDF files.
     Closes: Bug#823100. Thanks to Francesco Poli.
   * Update copyright info:
     + Tidy repackaging to only cover what is still shipped upstream.
     + Add Files and License sections for new file licensed as ISC.
   * Have git import-orig use merge-strategy replace.
   * Update patches:
     + Drop patches cherry-picked upstream and now applied.
     + Consistently apply cherry-picked upstream patches first.
     + Unfuzz patches.
   * Stop build static library (seemingly no longer supported with
     upstream makefiles).
   * Update symbols file (92 missing).
Checksums-Sha1:
 030bbba2037e6de6b45e522291be5ee3a5c0c571 2851 ghostscript_9.20~dfsg-1~exp1.dsc
 9489bf12392539b5ef063636419ea7248dbed423 24642220 ghostscript_9.20~dfsg.orig.tar.gz
 001917e8523274ddfe322cdadf177b7e992e53ab 109620 ghostscript_9.20~dfsg-1~exp1.debian.tar.xz
 c57c6bd97844909e8298af6f3feed52c39e8ba55 11881250 ghostscript-dbg_9.20~dfsg-1~exp1_amd64.deb
 460410f651440b34b4d365e71d8cd723a2a647b3 5630086 ghostscript-doc_9.20~dfsg-1~exp1_all.deb
 037203771ed78a38fe94fe9156a8ca216214eff8 90006 ghostscript-x_9.20~dfsg-1~exp1_amd64.deb
 21a533243cc9f9419a93f62587262d055aef07c0 11804 ghostscript_9.20~dfsg-1~exp1_amd64.buildinfo
 e69e2aa918fe14dccd02301124b5abc814b3d0dd 96826 ghostscript_9.20~dfsg-1~exp1_amd64.deb
 e9e2869a94f79ba369d6f5a66f903e8f7b6f8827 72254 libgs-dev_9.20~dfsg-1~exp1_amd64.deb
 5287f9150b80186992e09557d11d8ee5ac48cf37 5159390 libgs9-common_9.20~dfsg-1~exp1_all.deb
 af3438abfd80f1f3729ce82ab8555a01f1d4ae7e 2065858 libgs9_9.20~dfsg-1~exp1_amd64.deb
Checksums-Sha256:
 6ffa52c98e73ce421475c3dcf2e47dbccc8ed6c35f33c4ae60c9550c047597e6 2851 ghostscript_9.20~dfsg-1~exp1.dsc
 4b1cc33e4add4b5c62304a041896a176cf69e2a3702ca2ac3ee06b168787f911 24642220 ghostscript_9.20~dfsg.orig.tar.gz
 ddfdc1a41574609b6221ebbddfa88fcdc0fdd42823fff0b3c5594cd338fdbfb8 109620 ghostscript_9.20~dfsg-1~exp1.debian.tar.xz
 d0af2b1852d85cbe0521e325784055593c765e83a602d09005cdceffb925607e 11881250 ghostscript-dbg_9.20~dfsg-1~exp1_amd64.deb
 c4d44274351104da8503d9ac9b044d2b5b17d2ef16e9dbc3b89befcdb6a6a751 5630086 ghostscript-doc_9.20~dfsg-1~exp1_all.deb
 a463787015ddc5b122ae0cd3506c9b2f27d06c62e7c6f77c6902af018fe9156b 90006 ghostscript-x_9.20~dfsg-1~exp1_amd64.deb
 6d3cec21195416172bdf966e69c8a7e0dc601abcbae6b5e235bebb45535c9e0c 11804 ghostscript_9.20~dfsg-1~exp1_amd64.buildinfo
 5703f6dec68c5e4e886ddbfc07ee074af3b008876db1c5d11152e2514c8a515e 96826 ghostscript_9.20~dfsg-1~exp1_amd64.deb
 21c233235edb4272d9908d74e41aadc54dc67b4a73089aee600efa0af48fa49c 72254 libgs-dev_9.20~dfsg-1~exp1_amd64.deb
 1e15e521416fd525c0825b834b6133210a21a714109da9e2a5ce0cc02f084718 5159390 libgs9-common_9.20~dfsg-1~exp1_all.deb
 b9ba623d0a2c396d56eeebe350f60b7404f4c1ab6251f3eb6d80150427c23287 2065858 libgs9_9.20~dfsg-1~exp1_amd64.deb
Files:
 bd7af6cd2431bc4a44062c5eb7836bab 2851 text optional ghostscript_9.20~dfsg-1~exp1.dsc
 d5fdc5f7b233c68d30d42a782535bdc0 24642220 text optional ghostscript_9.20~dfsg.orig.tar.gz
 affaaa464282e922355b6e883e796af3 109620 text optional ghostscript_9.20~dfsg-1~exp1.debian.tar.xz
 a74ba437ff13c90ee7ccd73149faf149 11881250 debug extra ghostscript-dbg_9.20~dfsg-1~exp1_amd64.deb
 a75ae2a58dff9ed6ba6ecdd7402d6298 5630086 doc optional ghostscript-doc_9.20~dfsg-1~exp1_all.deb
 963252dcd67455c8925f15958d1234b1 90006 text optional ghostscript-x_9.20~dfsg-1~exp1_amd64.deb
 3d9dea0820fdc855592a6e4ada3f3799 11804 text optional ghostscript_9.20~dfsg-1~exp1_amd64.buildinfo
 bc03802f6b0f49402ee0ba69a630d26d 96826 text optional ghostscript_9.20~dfsg-1~exp1_amd64.deb
 2ca58a7de3b6009b68e88c83f704cb35 72254 libdevel optional libgs-dev_9.20~dfsg-1~exp1_amd64.deb
 50cf41a670c9d9bb3f3c42e388777363 5159390 libs optional libgs9-common_9.20~dfsg-1~exp1_all.deb
 13bffabeca9a0b83751ea5e3e20c0653 2065858 libs optional libgs9_9.20~dfsg-1~exp1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=3bxl
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: