Severity: serious
Package: courier
Version: 0.59.0-1
User: [EMAIL PROTECTED]
Usertags: nonfree-doc rfc

Hi!

This source package contains the following files that claim to be
released under the non-free IETF license in RFC 2026:

  courier-0.59.0.orig/courier/doc/draft-varshavchik-exdata-smtpext.txt
  courier-0.59.0.orig/courier/doc/draft-varshavchik-verp-smtpext.txt
  courier-0.59.0.orig/courier/doc/draft-varshavchik-security-smtpext.txt

The top of these drafts says:

   This document is an Internet-Draft and is in full conformance with
   all provisions of Section 10 of RFC2026.

Section 10 contains the (old) IETF license.

Arguable, since these documents were written by the same author as the
software, the intention may have been to release the documents under the
same license as courier itself (or some other free license).  But there
is nothing in debian/copyright to clarify the situation, leaving this
ambiguous.  Hopefully the simplest solution will be to confirm with the
authors which license they actually intend: RFC 2026 or courier license.

The license on RFC/I-Ds is not DFSG-free, see:
 * http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=199810
 * http://release.debian.org/removing-non-free-documentation
 * http://wiki.debian.org/NonFreeIETFDocuments

The lenny release policy says binary and source packages must each be free:
 * http://release.debian.org/lenny/rc_policy.txt

The severity is serious, because this violates the Debian policy:
 * http://www.debian.org/doc/debian-policy/ch-archive.html#s-dfsg

There are (at least) three ways to fix this problem.  In order of
preference:

1. Ask the author of the RFC to re-license the RFC under a free
   license.  A template for this e-mail request can be found at
   http://wiki.debian.org/NonFreeIETFDocuments

2. Remove the non-free material from the source, e.g., by re-packaging
   the upstream archive and adding 'dfsg' to the Debian package
   version name.

3. Move the package to non-free.

General discussions are kindly requested to take place on debian-legal
or debian-devel in the thread with Subject: "Non-free IETF RFC/I-Ds in
source packages".

Thanks,
Simon



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to