[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#393390: marked as done (Source package contains non-free IETF RFC/I-D's)

Your message dated Sat, 24 Mar 2007 14:17:02 +0000
with message-id <E1HV73G-0002t9-Jy@ries.debian.org>
and subject line Bug#393390: fixed in libspf2 1.2.5.dfsg-1
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message --- 
Package: libspf2
Version: 1.2.5-3
Severity: serious

Hi!

This bug has been filed on multiple packages, and general discussions
are kindly requested to take place on debian-legal or debian-devel in
the thread with Subject: "Non-free IETF RFC/I-Ds in source packages".

It seems this source package contains the following files from the
IETF under non-free license terms:

libspf2-1.2.5.orig/docs/draft-mengwong-spf-00.txt 

The license on RFC/I-Ds is not DFSG-free, see:
 * http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=199810
 * http://release.debian.org/removing-non-free-documentation
 * http://wiki.debian.org/NonFreeIETFDocuments

The etch release policy says binary and source packages must each be free:
 * http://release.debian.org/etch_rc_policy.txt

The severity is serious, because this violates the Debian policy:
 * http://www.debian.org/doc/debian-policy/ch-archive.html#s-dfsg

There are (at least) three ways to fix this problem.  In order of
preference:

1. Ask the author of the RFC to re-license the RFC under a free
   license.  A template for this e-mail request can be found at
   http://wiki.debian.org/NonFreeIETFDocuments

2. Remove the non-free material from the source, e.g., by re-packaging
   the upstream archive and adding a 'dfsg' version name to it.

3. Move the package to non-free.

I went over many packages looking for names of likely non-free files,
and there may be false positives.  If this is the case for your
package, I'm sorry for the noise.  I'll modify the scripts to take
into account false positives when I learn of them, and publish the
list of exceptions under "Known exceptions" at
<http://wiki.debian.org/NonFreeIETFDocuments>.

Thanks,
Simon

--- End Message ---
--- Begin Message --- 
Source: libspf2
Source-Version: 1.2.5.dfsg-1

We believe that the bug you reported is fixed in the latest version of
libspf2, which is due to be installed in the Debian FTP archive:

libspf2-2_1.2.5.dfsg-1_i386.deb
  to pool/main/libs/libspf2/libspf2-2_1.2.5.dfsg-1_i386.deb
libspf2-dev_1.2.5.dfsg-1_i386.deb
  to pool/main/libs/libspf2/libspf2-dev_1.2.5.dfsg-1_i386.deb
libspf2_1.2.5.dfsg-1.diff.gz
  to pool/main/libs/libspf2/libspf2_1.2.5.dfsg-1.diff.gz
libspf2_1.2.5.dfsg-1.dsc
  to pool/main/libs/libspf2/libspf2_1.2.5.dfsg-1.dsc
libspf2_1.2.5.dfsg.orig.tar.gz
  to pool/main/libs/libspf2/libspf2_1.2.5.dfsg.orig.tar.gz
spfquery_1.2.5.dfsg-1_i386.deb
  to pool/main/libs/libspf2/spfquery_1.2.5.dfsg-1_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 393390@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Magnus Holmgren <magnus@kibibyte.se> (supplier of updated libspf2 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Sat, 24 Mar 2007 14:51:23 +0100
Source: libspf2
Binary: spfquery libspf2-2 libspf2-dev
Architecture: source i386
Version: 1.2.5.dfsg-1
Distribution: unstable
Urgency: low
Maintainer: Magnus Holmgren <magnus@kibibyte.se>
Changed-By: Magnus Holmgren <magnus@kibibyte.se>
Description: 
 libspf2-2  - library for validating mail senders with SPF
 libspf2-dev - Header and development libraries for libspf2
 spfquery   - query SPF (Sender Policy Framework) to validate mail senders
Closes: 258360 306875 372629 392793 393390 405885 410592
Changes: 
 libspf2 (1.2.5.dfsg-1) unstable; urgency=low
 .
   * New maintainer (Closes: #372629).
   * Repacked .orig.tar.gz without non-free IETF Internet Draft (Closes:
     #393390).
   * Merge updates from Ubuntu:
     - Add debian/compat and Build-depend on debhelper >= 5.
     - Add alternatives handling for /usr/bin/spfquery (Closes: #306875).
       - Conflict on libmail-spf-query-perl << 1:1.999.1-3.
       - Add postinst and prerm scripts.
     - debian/copyright: update author address.
     - debian/control: add final newline.
   * debian/control:
     * Change description of spfquery (Closes: #410592).
     * Add homepage to package descriptions.
   * Reduce Debian diff by changing line endings with sed instead.
   * Further reduce Debian diff by eliminating config.sub and config.guess
     from there. Build-depend on autotools-dev to ensure up-to-date
     versions instead.
   * The autogenerated spf_lib_version.h was put in the wrong directory,
     while there was a static spf_lib_version.h in the right directory.
     Fix that with some rules in debian/rules.
   * Use dpatch to manage patches.
   * Apply 20_64bit_types.dpatch to hopefully prevent segfaults on 64-bit
     architectures (Closes: #392793). Thanks to Thomas Jacob, Carsten
     Koch-Mauthe and Herbert Straub.
   * 20_printf_types.dpatch: Change format strings to use the z flag,
     meaning size_t, among other things.
   * 30_spfd_check_unlink_failure.dpatch: Fix a typo in spfd (patch from
     Thomas Jacob).
   * debian/watch: added.
   * Update Standards-Version to 3.7.2 without changes.
   * Apply 20_spf_dns_include_std_headers.dpatch: Include arpa/nameser.h and
     netdb.h from spf_dns.h instead of defining the constants needed unless
     certain HAVE_ macros are defined (Closes: #405885).
   * Apply 25_maxvals.dpatch, which brings certain processing limits (meant
     to mitigate DoS attacks) in line with RFC 4408. Thanks to Scott
     Kitterman.
   * debian/control: Change libspf2-dev dependency to ${binary:Version} so
     that binNMUs will work.
   * Ship spfd in the spfquery package (Closes: #258360).
Files: 
 12a276e8ff5de1c6b2c9c58d53bb6d2a 629 libs optional libspf2_1.2.5.dfsg-1.dsc
 ea0ec84a70e27d6aa32a95f65c1208e7 500209 libs optional libspf2_1.2.5.dfsg.orig.tar.gz
 51b3534a8aa09a9e669880ded3f2640a 7529 libs optional libspf2_1.2.5.dfsg-1.diff.gz
 187293a02b7713fe8f168e5a51dbef91 72644 libdevel optional libspf2-dev_1.2.5.dfsg-1_i386.deb
 0bcbc8592fd6868b2e74b3b30ef6eb01 52058 libs optional libspf2-2_1.2.5.dfsg-1_i386.deb
 6996bc3f906d6829b0dde6309008978f 27854 mail optional spfquery_1.2.5.dfsg-1_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGBTGxST77jl1k+HARAv0AAJ9PLEMt9LRwu0YW2aMwLCzmvkSCLwCguY7d
8HsmaANMgQ/woLi+Ij6fOF0=
=Z+He
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: