[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#763063: marked as done (Licensing issue on images files)



Your message dated Thu, 27 Dec 2018 16:54:11 +0000
with message-id <E1gcYvD-000Bko-VJ@fasolo.debian.org>
and subject line Bug#763063: fixed in thunar-volman 0.9.1-1
has caused the Debian Bug report #763063,
regarding Licensing issue on images files
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
763063: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=763063
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: thunar-volman
Version: 0.8.0-4
Severity: important

Hi,

while preparing my packaging of Tails' OpenPGP Applet (ITP #756404), it was
pointed to me that there were issues on images files shipped with it : they
where licensed using CC-BY-SA 2.0, which is not DFSG-compliant. They seemed
indeed derived from icons using an old tango theme, which were indeed licensed
CC-BY-SA 2.0 at the time.

I saw that on my Sid system, several packages have the same issue :

~$ rgrep -rl 'by-sa/2\.0' /usr/share/icons/*/scalable |xargs dlocate --package-only
gitg
network-manager-gnome
soundconverter
thunar-volman
xfburn
xfce4-battery-plugin
xfce4-fsguard-plugin
xfce4-power-manager-data

There may be more, since it only reports the packages I have installed.
It doesn't seem to be dual-licensing, judging from the content of the svg files
involved.

So, I asked on debian-devel but received very few responses, mostly
inconclusives or saying we should allow CC-BY-SA 2.0 in debian [1] [2]

This is not an issue in the package I work on anymore, since I could remake the
icons and include them upstream. However, I think it's best to track this issue
and maybe clarify once and for all what to do with CC-BY-SA 2.0 images.

Currently, I see the following options : 
- convincing upstream to relicense the files using a later (>= 3.0) version of the license, which, as I found out, can be difficult
- removing or replacing the files
- decide that CC-BY-SA 2.0 is OK after all.

Cheers,

[1] https://lists.debian.org/debian-devel/2014/08/msg00073.html
[2] https://lists.debian.org/debian-devel/2014/09/msg00725.html

-- 
Clement Hermann (nodens)

-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages thunar-volman depends on:
ii  exo-utils       0.10.2-4
ii  libc6           2.19-11
ii  libexo-1-0      0.10.2-4
ii  libglib2.0-0    2.40.0-5
ii  libgtk2.0-0     2.24.24-1
ii  libgudev-1.0-0  215-4
ii  libnotify4      0.7.6-2
ii  libpango-1.0-0  1.36.7-1
ii  libxfce4ui-1-0  4.10.0-6
ii  libxfce4util6   4.10.1-2
ii  libxfconf-0-2   4.10.0-3
ii  thunar          1.6.3-1

thunar-volman recommends no packages.

thunar-volman suggests no packages.

-- no debconf information

--- End Message ---
--- Begin Message ---
Source: thunar-volman
Source-Version: 0.9.1-1

We believe that the bug you reported is fixed in the latest version of
thunar-volman, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 763063@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Yves-Alexis Perez <corsac@debian.org> (supplier of updated thunar-volman package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 27 Dec 2018 17:40:02 +0100
Source: thunar-volman
Binary: thunar-volman
Architecture: source
Version: 0.9.1-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Xfce Maintainers <debian-xfce@lists.debian.org>
Changed-By: Yves-Alexis Perez <corsac@debian.org>
Description:
 thunar-volman - Thunar extension for volumes management
Closes: 763063
Changes:
 thunar-volman (0.9.1-1) unstable; urgency=medium
 .
   * New upstream version 0.9.1
     - FIx license on tvm-burn-cd.svg                            closes: #763063
   * d/control: drop Lionel from uploaders, thanks!
   * d/control: update standards version to 4.3.0
Checksums-Sha1:
 99c912b489dd2e803da3b84ef347e2a42ee056eb 1801 thunar-volman_0.9.1-1.dsc
 90b499d3135dd40b5959bba1bb617e2108d7acc6 489210 thunar-volman_0.9.1.orig.tar.bz2
 cb45fb12194a6828012428e56d12cd5679d9e37a 5352 thunar-volman_0.9.1-1.debian.tar.xz
 0f6bcfe9f15b26046515bdfa2cf41fa6c31ef11e 14936 thunar-volman_0.9.1-1_amd64.buildinfo
Checksums-Sha256:
 f9936a521a02f02ae5249d75bfcf13217b67817c717c3828f46b1f041a81ae21 1801 thunar-volman_0.9.1-1.dsc
 cd87291a427e8a561c566dca3aa7e93b56fdce4caefc755dde0f59198f6db359 489210 thunar-volman_0.9.1.orig.tar.bz2
 5abe125b0c51c95012f1d3a31d73fac51ced511dc2dbabae185e5372c9d54d3e 5352 thunar-volman_0.9.1-1.debian.tar.xz
 cb1f5c87aee515c14e93041e45fb3ba2d84bac8764f6e68a32a4471ce3b5db39 14936 thunar-volman_0.9.1-1_amd64.buildinfo
Files:
 e8dbb6a1926cdf9e60aed9ace0121824 1801 xfce optional thunar-volman_0.9.1-1.dsc
 4992a18f422918c33b562d6e66045754 489210 xfce optional thunar-volman_0.9.1.orig.tar.bz2
 93a262d7068c9eaf5236abba9a6ad8a5 5352 xfce optional thunar-volman_0.9.1-1.debian.tar.xz
 962f8ed347a99c3c0474acbcb5f21458 14936 xfce optional thunar-volman_0.9.1-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCgAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAlwlAWMACgkQ3rYcyPpX
RFsrHQgAulRgqB62pwobnxO2YnAU9nOUZkO/iua6WQ50hvVzfyhvLme9M6g/PY7i
PWX6AtQ5fd9451M4jT/Xo5JHBkouAWyGI/64mzrFtw48qt/WUyQdNdNIjJzrQPPp
c3s4D7acIgVf5Gezsqq6cLd6Rw0h+X+sv/pYWjsUBKClE6RSOR5uHUdaEfJnFhV2
9zIvAw+lUskUlmf6yc/EIS7JaWMn3CBr0MosFMMNE/KFcC+e9pwkmAZpu3ZWKGx9
GXYGY9DCR5X894+Bp+bGCN3wkf9XW8gXBUmberVuth99iSn/PCRiz3fRle2eDNs8
YTASvXHadDeU3B3gkHeyQTD/Qg7UNA==
=ni8o
-----END PGP SIGNATURE-----

--- End Message ---

Reply to: