Dear Phillip, On Sun, Jul 28, 2019 at 5:18 AM Phillip Lougher <phillip.loug...@gmail.com> wrote: > I notice you have produced a new package squashfs-tools-ng_0.4.2. I have packaged it and uploaded for review of our FTP Master team. They are going to check if all files have a license that's acceptable as free software according to our guidelines.
> I have not been able to find any download of that package available. No one can download the package until the mentioned check is over. > Can you confirm that this package does not repeat the libel contained > in the upstream package? David removed that text from his Git tree. As this is the latest release and before that removal, it's still contains the sentences that you thought to be inactive and the squashfs-tools development seemed to be stalled. > Additionally this page > > https://ftp-master.debian.org/new/squashfs-tools-ng_0.4.2-1.html > > In the "Description" contains two paragraphs lifted from my > Squashfs-tools repository without attribution which I consider a > copyright violation. > > "Squashfs is a highly compressed read-only filesystem for Linux. It uses zlib > compression to compress both files, inodes and directories. Inodes in the > system are very small and all blocks are packed to minimise data overhead. > Block sizes greater than 4K are supported up to a maximum of 64K. > . > Squashfs is intended for general read-only filesystem use, for archival use > (i.e. in cases where a .tar.gz file may be used), and in constrained block > device/memory systems (e.g. embedded systems) where low overhead is needed." If you ask about if I credited you for this paragraph in debian/copyright then forgive me but not yet. I can ask the FTP Masters to reject the current package and I'm going to re-upload with that added. @David may even write a new description for his squashfs-tools-ng project. > Dr Phillip Lougher > Squashfs author and maintainer With all the respect, I don't know you are such upset and against this new tool. If I look around, it seemed you are a dormant developer. You didn't update your homepage[1], even today it still states "Squashfs 4.2 released (28th February 2011)" and "Squashfs 4.2 This is the latest release, for users of 2.6.29 and later kernels". No mention of the real latest release, 4.3 [2]. I don't see any announcement either where you present the new development on GitHub. Quickly checking the commit logs, it reveals that you only fixed security vulnerabilities 13 days ago[3] when these were publicly reported four years ago (on July 20th, 2015)[4]. Then David announced _twice_ squashfs-tools-ng on _your_ mailing list[5][6] without any comment from you. Now all of a sudden you are against him because he (me and lot of people included) thought you are inactive[7]. Just for the record, did you contact Gentoo as well? They already distribute squashfs-tools-ng[8] with the text you label as "defamatory". @FTP Masters: please reject the package if it's really a copyright infringement using a text description from an other package without crediting that in our copyright file. Kind regards, Laszlo/GCS [1] http://squashfs.sourceforge.net/ [2] https://sourceforge.net/projects/squashfs/files/squashfs/squashfs4.3/ [3] https://github.com/plougher/squashfs-tools/commit/f95864afe8833fe3ad782d714b41378e860977b1 [4] https://lwn.net/Vulnerabilities/651775/ [5] https://sourceforge.net/p/squashfs/mailman/message/36689846/ [6] https://sourceforge.net/p/squashfs/mailman/message/36709722/ [7] https://github.com/AgentD/squashfs-tools-ng/issues/10 [8] https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=5ae739228d96e5857b88c0658d22456da1724ea0
