Your message dated Sun, 10 Sep 2023 11:37:19 +0000 with message-id <e1qfikh-00402b...@fasolo.debian.org> and subject line Bug#1012005: fixed in xxhash 0.8.2-1 has caused the Debian Bug report #1012005, regarding xxhash: debian/copyright file seems to be inaccurate to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 1012005: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1012005 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: xxhash Version: 0.8.1-1 Severity: important Hello! The debian/copyright file of package 'xxhash' states, in part: [...] Files: xxhsum.c Copyright: 2012-2014 Yann Collet License: GPL-2 [...] According to the machine-readable debian/copyright file format [specification], "GPL-2" means that the file is licensed under the terms of the GNU GPL v2 only. [specification]: <https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/#license-short-name> However, by looking at the upstream [repository], I see that the file is licensed as follows: /* * xxhsum - Command line interface for xxhash algorithms * Copyright (C) 2013-2021 Yann Collet * * GPL v2 License * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License along * with this program; if not, write to the Free Software Foundation, Inc., * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. * * You can contact the author at: * - xxHash homepage: https://www.xxhash.com * - xxHash source repository: https://github.com/Cyan4973/xxHash */ [repository]: <https://github.com/Cyan4973/xxHash/blob/dev/cli/xxhsum.c> Despite the title "GPL v2 License", the license grant says "version 2 of the License, or (at your option) any later version." Hence, I would say that the license should be described as "GPL-2+" in the machine-readable debian/copyright file (see again the [specification]). Please double check and fix the debian/copyright file, as appropriate. Thanks for your time and dedication!
--- End Message ---
--- Begin Message ---Source: xxhash Source-Version: 0.8.2-1 Done: Josue Ortega <jo...@debian.org> We believe that the bug you reported is fixed in the latest version of xxhash, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1012...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Josue Ortega <jo...@debian.org> (supplier of updated xxhash package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 10 Sep 2023 15:19:16 +0530 Source: xxhash Architecture: source Version: 0.8.2-1 Distribution: unstable Urgency: medium Maintainer: Josue Ortega <jo...@debian.org> Changed-By: Josue Ortega <jo...@debian.org> Closes: 1012005 1050859 Changes: xxhash (0.8.2-1) unstable; urgency=medium . [ Debian Janitor ] * Trim trailing whitespace. * Update standards version to 4.6.1, no changes needed. . [ Josue Ortega ] * New upstream release (0.8.2): + Refresh debian/patches. * debian/copyright: + Fix GPL-2+ version. Thanks to Bastian Germann <b...@debian.org>. (Closes: #1012005). + Update copyright years. * debian/watch: Update watch file. Thanks to Patrice Duroux <patrice.dur...@gmail.com> for the patch. Closes: #1050859. * debian/rules: Add hardeing flags. * Bump Standards-Version to 4.6.2. No changes required. Checksums-Sha1: 0503332f51b34c3c2375e7f83dbb2b92fc4d6db5 1969 xxhash_0.8.2-1.dsc 8df702581ebc48a5e05be0f1ede6e1e9139e4da1 1141188 xxhash_0.8.2.orig.tar.gz 034e66e65688f9b812afe2ea350f1d4af4868f36 4912 xxhash_0.8.2-1.debian.tar.xz ea15868c42040201e0475d80eb59d6888bb6f0a3 6815 xxhash_0.8.2-1_amd64.buildinfo Checksums-Sha256: 907cf906725f27c8accfc50719817536a705eb906a56739a948dca27691d286b 1969 xxhash_0.8.2-1.dsc baee0c6afd4f03165de7a4e67988d16f0f2b257b51d0e3cb91909302a26a79c4 1141188 xxhash_0.8.2.orig.tar.gz 8727b0ae0999644e4e2ea789b986cc2b8d520d5caa034c050289ac00c8249c40 4912 xxhash_0.8.2-1.debian.tar.xz ead9257ff5fde74b2e8dab34473749905b3d358bdbacd1b38b94bfd82feb3004 6815 xxhash_0.8.2-1_amd64.buildinfo Files: 0d433f3c849d992ca356409589d442b1 1969 utils optional xxhash_0.8.2-1.dsc a7628d7a4fd608a7573c5a3e2c856ea5 1141188 utils optional xxhash_0.8.2.orig.tar.gz 5b6294423f87bea79aa046ba1e14aa69 4912 utils optional xxhash_0.8.2-1.debian.tar.xz d4f6aa588441f6980c57fc43ac435dad 6815 utils optional xxhash_0.8.2-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJFBAEBCAAvFiEEdzOzKNJ5X1viMlrdAVCdXKtK/T8FAmT9nUkRHGpvc3VlQGRl Ymlhbi5vcmcACgkQAVCdXKtK/T9v4RAAqeJrbtCUG43LQncJw7j9SmxtpCkq/YGd pJCvt+gXAwRLKOTdPlDDUSuZnGxkp1kvuRsZF4KbF2ShH+cdpkIz2S1B9H2/FaS6 gggZty1rKpkkZ+tApjz6jt/JWrdogH5sB8uWOo2GDof07lJKSVN829ZNHI/yivQq ix94eaoPHd5k5yEF7ItutvCEGkk+5LgkZ8q1T2zx4zW6XTwbjAOIQyXpGkThpUAQ 3xEvS765neP4if25XPBMe5/CzJzBwU0TTWRvsJ5xCaypWPBCIfZm7e7a8YZv/nq8 isTPQ1o9VOXFLYBElZJLmueySkwRsD1eWBBSFmr0RV2cfqr5GzCJHp1NtmM89xLg WjbmA2BqFl8TzgNm5YA64rl2bG4CmLnyUIXlfbbuc6TfKVPDwaqMZEAU/JOBh+/c f70qdFPl4QA1Yn0T3HbNMVgv1eaZQaUGm/SdyRpjkL6LTt1pxlr+st7c6bmE1lru l1a2OY2DHcyangsBk553HrJ9meA+92uZP0i+eflHzVP3EE/yfd1e4lNEXutAGeOb 7mi0MAGmroRZ9JkHI3EaZYNd2ryTbrcMkDMnjkniAjSym+VKfAprZA1MsuW23VmY IO/wjN5MumzMH55tfzosA7wCLXCo+iKMhX7CK50WTXsvg1NFbGJv9oSQrq3a0WI5 SmLQgUxCpUA= =yt45 -----END PGP SIGNATURE-----
--- End Message ---
