[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#769531: marked as done (unblock: xmlrpc-c/1.33.14-0.2)



Your message dated Fri, 14 Nov 2014 12:15:30 +0000
with message-id <0734153624bfee37e6e460eb59051212@mail.adsl.funky-badger.org>
and subject line Re: Bug#769531: unblock: xmlrpc-c/1.33.14-0.2
has caused the Debian Bug report #769531,
regarding unblock: xmlrpc-c/1.33.14-0.2
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
769531: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=769531
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian.org@packages.debian.org
Usertags: unblock

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Please unblock package xmlrpc-c

xmlrpc-c was uploaded yesterday (via DELAYED/2) to fix RC bug 760377
which is about missing information in d/copyright. While investigating
the issue I found a spurious license violation (the file with the
conflicting license is unused) and to prevent it from accidentely
being used, I remove it during the clean target. Also one of the
packages was missing dependencies on libraries, which are now added by
${shlibs:Depends}.

Please find the debdiff against the current version in testing attached.

unblock xmlrpc-c/1.33.14-0.2

- -- System Information:
Debian Release: 7.7
  APT prefers stable
  APT policy: (500, 'stable'), (99, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.2.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAEBCAAGBQJUZeEUAAoJEJxcmesFvXUKY2oIAIzTVA41T4sJGemRSjiXbBg/
fqQ7lQuo2ze3gRfWIadJo8U/lW5DiFxbQdHdqofcuBiFu/o/usrBrCnlPD4j9Bs5
tHj1iE/ckEO/rwCiZtpQQ2qDOFelF6jGGltaw16bnUmaJK8OZIoTr8xm6BSTy6wY
C2k+A4reB3PzWNwRP9NS56/Xq68cLX4b/9c7+KmGq/vIFXnWammX9jY0XEbkNhG2
cPllrH7jyHZzf/NODe8C4/owmGPBOlQ0nbGmAbplKrjzPKlIs/phvcgPuv8ax1UA
bbjjpQvSDtph2V5tqAuRMfFuaXMuinxN43hzjf47yhXyL9HgrQKCgur1Sz8u9xE=
=oF+/
-----END PGP SIGNATURE-----
diff -u xmlrpc-c-1.33.14/debian/changelog xmlrpc-c-1.33.14/debian/changelog
--- xmlrpc-c-1.33.14/debian/changelog
+++ xmlrpc-c-1.33.14/debian/changelog
@@ -1,3 +1,13 @@
+xmlrpc-c (1.33.14-0.2) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Document missing license (Closes: #760377)
+  * Clean unused code to prevent conflicting licenses
+  * Add ${shlibs:Depends} to depends of xmlrpc-api-utils to prevent
+    several missing dependencies (Thanks lintian)
+
+ -- Paul Gevers <elbrus@debian.org>  Sat, 08 Nov 2014 20:53:51 +0100
+
 xmlrpc-c (1.33.14-0.1) unstable; urgency=low
 
   * Non-maintainer upload.
diff -u xmlrpc-c-1.33.14/debian/control xmlrpc-c-1.33.14/debian/control
--- xmlrpc-c-1.33.14/debian/control
+++ xmlrpc-c-1.33.14/debian/control
@@ -76,6 +76,7 @@
 Architecture: any
 Section: devel
 Depends: ${misc:Depends},
+ ${shlibs:Depends},
  libxmlrpc-c++8 (= ${binary:Version}),
  libxmlrpc-core-c3 (= ${binary:Version}),
  libc6-dev,
diff -u xmlrpc-c-1.33.14/debian/copyright xmlrpc-c-1.33.14/debian/copyright
--- xmlrpc-c-1.33.14/debian/copyright
+++ xmlrpc-c-1.33.14/debian/copyright
@@ -14,15 +14,23 @@
 directory lib/abyss and parts of the file src/xmlrpc_abyss.c, and the
 Python 1.5.2 license applies to parts of the file src/xmlrpc_base64.c.
 
-And as for the tools/ directory, you'll have to examine the licenses on
-your own.
+The file tools/turbocharger/mod_gzip.c is covered by the Apache license, and
+the file tools/perl_packetsocket/PacketSocket.pm is created by Bryan
+Henderson, San Jose CA who contributed it to the public domain. The files
+lib/util/getoptx.c and lib/util/getoptx.h are licensed under the GNU
+General Public License version 1 (or higher), 
 
+Due to the above, it is our understanding (see bug 760377) that the
+resulting binaries are effectively licensed under GPL-1+.
 
-                     XML-RPC C Library License
+
+                     XML-RPC C Library License (BSD-3-clause)
                      -------------------------
 
 Copyright (C) 2001 by First Peer, Inc. All rights reserved.
 Copyright (C) 2001 by Eric Kidd. All rights reserved.
+Copyright (C) 2002 by jeff@ourexchange.net. All rights reserved.
+Copyright (C) 2005 by Steven A. Bone, sbone@pobox.com. All rights reserved.
 
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions
@@ -73,7 +81,7 @@
 SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 
 
-                     ABYSS Web Server License
+                     ABYSS Web Server License (BSD-3-clause)
                      ------------------------
 
 Copyright (C) 2000 by Moez Mahfoudh <mmoez@bigfoot.com>. All rights reserved.
@@ -135,0 +144,81 @@
+
+
+                     GNU General Public License version 1 (GPL-1+)
+                     ---------------------------------------------
+
+Copyright (C) 1989 Free Software Foundation, Inc.
+
+This program is free software; you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation; either version 1, or (at your option)
+any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program; if not, write to the Free Software
+Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.  */
+
+On Debian systems, the complete text of the GNU General Public
+License version 1 can be found in `/usr/share/common-licenses/LGPL-1'.
+
+
+                     Apache license (Apache-1.0)
+                     ---------------------------
+
+Copyright (c) 1995-2000 The Apache Group.  All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions
+are met:
+
+1. Redistributions of source code must retain the above copyright
+   notice, this list of conditions and the following disclaimer. 
+
+2. Redistributions in binary form must reproduce the above copyright
+   notice, this list of conditions and the following disclaimer in
+   the documentation and/or other materials provided with the
+   distribution.
+
+3. All advertising materials mentioning features or use of this
+   software must display the following acknowledgment:
+   "This product includes software developed by the Apache Group
+   for use in the Apache HTTP server project (http://www.apache.org/)."
+
+4. The names "Apache Server" and "Apache Group" must not be used to
+   endorse or promote products derived from this software without
+   prior written permission. For written permission, please contact
+   apache@apache.org.
+
+5. Products derived from this software may not be called "Apache"
+   nor may "Apache" appear in their names without prior written
+   permission of the Apache Group.
+
+6. Redistributions of any form whatsoever must retain the following
+   acknowledgment:
+   "This product includes software developed by the Apache Group
+   for use in the Apache HTTP server project (http://www.apache.org/)."
+
+THIS SOFTWARE IS PROVIDED BY THE APACHE GROUP ``AS IS'' AND ANY
+EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE APACHE GROUP OR
+ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+OF THE POSSIBILITY OF SUCH DAMAGE.
+====================================================================
+
+This software consists of voluntary contributions made by many
+individuals on behalf of the Apache Group and was originally based
+on public domain software written at the National Center for
+Supercomputing Applications, University of Illinois, Urbana-Champaign.
+For more information on the Apache Group and the Apache HTTP server
+project, please see <http://www.apache.org/>.
diff -u xmlrpc-c-1.33.14/debian/rules xmlrpc-c-1.33.14/debian/rules
--- xmlrpc-c-1.33.14/debian/rules
+++ xmlrpc-c-1.33.14/debian/rules
@@ -32,6 +32,9 @@
 	done
 	# a few other misc files
 	rm -f src/test/depend.mk
+	# Strip the following unused file from the tree to prevent it from being
+	# used as the license is incompatible with lib/util/getoptx.*
+	rm -f tools/turbocharger/mod_gzip.c
 	dh_clean -X autom4te.cache
 
 override_dh_install:

--- End Message ---
--- Begin Message ---
On 2014-11-14 11:01, Paul Gevers wrote:
xmlrpc-c was uploaded yesterday (via DELAYED/2) to fix RC bug 760377
which is about missing information in d/copyright. While investigating
the issue I found a spurious license violation (the file with the
conflicting license is unused) and to prevent it from accidentely
being used, I remove it during the clean target. Also one of the
packages was missing dependencies on libraries, which are now added by
${shlibs:Depends}.

Niels unblocked this yesterday.

Regards,

Adam

--- End Message ---

Reply to: