Source: firmware-nonfree
Version: 20240709-1
Severity: serious
Tags: upstream

It seems like no-one actually read LICENCE.ish, because it says:

> 3 CONFIDENTIALITY. The terms of this Agreement and the
> Material are Intel confidential information and subject to your
> valid corporate non-disclosure agreement with Intel (CNDA).
> Except as authorized in Section 2.1, you must not disclose this
> information to anyone, including the U.S. government. This
> Agreement will not become effective, or will automatically
> terminate, in the absence of a CNDA. This Agreement will take
> precedence in the event of a conflict with the CNDA.

So not only should the firmware not have been sent to linux-firmware
under this licence, but the licence text itself should not have been
sent either.

We have not yet included this firmware in a binary package but is
still present in the source package.

I have reported this upstream and expect that the licence will be
fixed, but in the mean time it should be excluded from the source
package.

Ben.

-- System Information:
Debian Release: trixie/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'stable-updates'), (500, 
'stable-security'), (500, 'oldstable-updates'), (500, 'oldstable-security'), 
(500, 'oldoldstable-updates'), (500, 'oldoldstable'), (500, 'unstable'), (500, 
'testing'), (500, 'stable'), (500, 'oldstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.19-amd64 (SMP w/12 CPU threads; PREEMPT)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Attachment: signature.asc
Description: PGP signature

Reply via email to