Your message dated Sat, 31 Mar 2012 02:48:02 +0000
with message-id <e1sdome-0007ov...@franck.debian.org>
and subject line Bug#665937: fixed in asterisk 1:1.8.10.1~dfsg-1
has caused the Debian Bug report #665937,
regarding Source package contains non-free IETF RFC/I-D
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
665937: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=665937
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Severity: serious
Package: asterisk
Version: 1:1.8.10.0~dfsg-1
User: debian-rele...@lists.debian.org
Usertags: nonfree-doc rfc
Hi!
This source package contains the following files from the IETF under
non-free license terms:
asterisk-1.8.10.0/codecs/ilbc/rfc3951.txt
Further, the iLBC implementation in codecs/ilbc/ is derived from RFC
3951 but I don't see a DFSG compatible license statement covering that
code in debian/copyright. There is a file codecs/ilbc/LICENSE with some
licensing information that may be relevant, however I have not found the
source code files in asterisk to be part of any WebRTC release. See
also this bug report which seems related:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=664606
The license on RFC/I-Ds is not DFSG-free, see:
* http://wiki.debian.org/NonFreeIETFDocuments
* http://bugs.debian.org/199810
According to the squeeze/wheezy release policy, source packages must be
DFSG-free, see:
* http://release.debian.org/squeeze/rc_policy.txt
* http://release.debian.org/wheezy/rc_policy.txt
The severity is serious, because this violates the Debian policy:
* http://www.debian.org/doc/debian-policy/ch-archive.html#s-dfsg
There are (at least) three ways to fix this problem. In order of
preference:
1. Ask the author of the RFC to re-license the RFC under a free
license. A template for this e-mail request can be found at
http://wiki.debian.org/NonFreeIETFDocuments
2. Remove the non-free material from the source, e.g., by re-packaging
the upstream archive and adding 'dfsg' to the Debian package
version name.
3. Move the package to non-free.
General discussions are kindly requested to take place on debian-legal
or debian-devel in the thread with Subject: "Non-free IETF RFC/I-Ds in
source packages".
Thanks,
Simon
--- End Message ---
--- Begin Message ---
Source: asterisk
Source-Version: 1:1.8.10.1~dfsg-1
We believe that the bug you reported is fixed in the latest version of
asterisk, which is due to be installed in the Debian FTP archive:
asterisk-config_1.8.10.1~dfsg-1_all.deb
to main/a/asterisk/asterisk-config_1.8.10.1~dfsg-1_all.deb
asterisk-dahdi_1.8.10.1~dfsg-1_amd64.deb
to main/a/asterisk/asterisk-dahdi_1.8.10.1~dfsg-1_amd64.deb
asterisk-dbg_1.8.10.1~dfsg-1_amd64.deb
to main/a/asterisk/asterisk-dbg_1.8.10.1~dfsg-1_amd64.deb
asterisk-dev_1.8.10.1~dfsg-1_all.deb
to main/a/asterisk/asterisk-dev_1.8.10.1~dfsg-1_all.deb
asterisk-doc_1.8.10.1~dfsg-1_all.deb
to main/a/asterisk/asterisk-doc_1.8.10.1~dfsg-1_all.deb
asterisk-mobile_1.8.10.1~dfsg-1_amd64.deb
to main/a/asterisk/asterisk-mobile_1.8.10.1~dfsg-1_amd64.deb
asterisk-modules_1.8.10.1~dfsg-1_amd64.deb
to main/a/asterisk/asterisk-modules_1.8.10.1~dfsg-1_amd64.deb
asterisk-mp3_1.8.10.1~dfsg-1_amd64.deb
to main/a/asterisk/asterisk-mp3_1.8.10.1~dfsg-1_amd64.deb
asterisk-mysql_1.8.10.1~dfsg-1_amd64.deb
to main/a/asterisk/asterisk-mysql_1.8.10.1~dfsg-1_amd64.deb
asterisk-ooh323_1.8.10.1~dfsg-1_amd64.deb
to main/a/asterisk/asterisk-ooh323_1.8.10.1~dfsg-1_amd64.deb
asterisk-voicemail-imapstorage_1.8.10.1~dfsg-1_amd64.deb
to main/a/asterisk/asterisk-voicemail-imapstorage_1.8.10.1~dfsg-1_amd64.deb
asterisk-voicemail-odbcstorage_1.8.10.1~dfsg-1_amd64.deb
to main/a/asterisk/asterisk-voicemail-odbcstorage_1.8.10.1~dfsg-1_amd64.deb
asterisk-voicemail_1.8.10.1~dfsg-1_amd64.deb
to main/a/asterisk/asterisk-voicemail_1.8.10.1~dfsg-1_amd64.deb
asterisk_1.8.10.1~dfsg-1.debian.tar.gz
to main/a/asterisk/asterisk_1.8.10.1~dfsg-1.debian.tar.gz
asterisk_1.8.10.1~dfsg-1.dsc
to main/a/asterisk/asterisk_1.8.10.1~dfsg-1.dsc
asterisk_1.8.10.1~dfsg-1_amd64.deb
to main/a/asterisk/asterisk_1.8.10.1~dfsg-1_amd64.deb
asterisk_1.8.10.1~dfsg.orig.tar.gz
to main/a/asterisk/asterisk_1.8.10.1~dfsg.orig.tar.gz
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 665...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Mark Purcell <m...@debian.org> (supplier of updated asterisk package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sat, 31 Mar 2012 08:44:57 +1100
Source: asterisk
Binary: asterisk asterisk-modules asterisk-dahdi asterisk-voicemail
asterisk-voicemail-imapstorage asterisk-voicemail-odbcstorage asterisk-ooh323
asterisk-mp3 asterisk-mysql asterisk-mobile asterisk-doc asterisk-dev
asterisk-dbg asterisk-config
Architecture: source all amd64
Version: 1:1.8.10.1~dfsg-1
Distribution: unstable
Urgency: low
Maintainer: Debian VoIP Team <pkg-voip-maintain...@lists.alioth.debian.org>
Changed-By: Mark Purcell <m...@debian.org>
Description:
asterisk - Open Source Private Branch Exchange (PBX)
asterisk-config - Configuration files for Asterisk
asterisk-dahdi - DAHDI devices support for the Asterisk PBX
asterisk-dbg - Debugging symbols for Asterisk
asterisk-dev - Development files for Asterisk
asterisk-doc - Source code documentation for Asterisk
asterisk-mobile - Bluetooth phone support for the Asterisk PBX
asterisk-modules - loadable modules for the Asterisk PBX
asterisk-mp3 - MP3 playback support for the Asterisk PBX
asterisk-mysql - MySQL database protocol support for the Asterisk PBX
asterisk-ooh323 - H.323 protocol support for the Asterisk PBX - ooH323c
asterisk-voicemail - simple voicemail support for the Asterisk PBX
asterisk-voicemail-imapstorage - IMAP voicemail storage support for the
Asterisk PBX
asterisk-voicemail-odbcstorage - ODBC voicemail storage support for the
Asterisk PBX
Closes: 663998 664004 664411 665937
Changes:
asterisk (1:1.8.10.1~dfsg-1) unstable; urgency=low
.
[ Victor Seva ]
* Update backports/squeeze script gmime2.6 -> gmime2.4
.
[ Tzafrir Cohen ]
* New upstrean bug-fix release.
- Fixes "[CVE-2012-1183 - CVE-2012-1184] Asterisk: AST-2012-002 and
AST-2012-003 flaws" (Closes: #664411).
* Patch gmime2.6 (Closes: #663998, #664004), also fixed Build-Depends.
* Remove the text of RFC 3951 from the tarball. (Closes: #665937)
Checksums-Sha1:
0be415987e5d5375a1c0c35f507c167c5d1ede52 2997 asterisk_1.8.10.1~dfsg-1.dsc
8d1d2ce5c08b4dc662f2d396bc92e914ca104ab9 7661601
asterisk_1.8.10.1~dfsg.orig.tar.gz
bac8aff4a32efeda84b2f8bc41c5ab1ab9818bca 349229
asterisk_1.8.10.1~dfsg-1.debian.tar.gz
1ad2cc6d5be51e6db51fb0dbdefa8b7119dbb9e4 1954736
asterisk-doc_1.8.10.1~dfsg-1_all.deb
1bf414afb7fdc5a0f871cfc241d598968aed8351 918686
asterisk-dev_1.8.10.1~dfsg-1_all.deb
9065d2828c120b23ee4c5233c07fff0e3f100ee6 969962
asterisk-config_1.8.10.1~dfsg-1_all.deb
42f6db374b7b3ed2a327ea4bc31d5262f8018470 1712720
asterisk_1.8.10.1~dfsg-1_amd64.deb
37ef807d38c9bbeea83b29a2de3f696469a2248c 2786026
asterisk-modules_1.8.10.1~dfsg-1_amd64.deb
0956384f72b457df2f06c0a9036ccdacb645b2ce 876686
asterisk-dahdi_1.8.10.1~dfsg-1_amd64.deb
7349d37f398ba605167f4f0f1b20d78264668c9c 653442
asterisk-voicemail_1.8.10.1~dfsg-1_amd64.deb
ee44e77a28ac167aaaac8268f5b7a78cccf6d6c8 668866
asterisk-voicemail-imapstorage_1.8.10.1~dfsg-1_amd64.deb
110d71a57ec7621e41dda67298d3f0395028bd40 659460
asterisk-voicemail-odbcstorage_1.8.10.1~dfsg-1_amd64.deb
2647109ccda830c50ef0855a3e7611d4d439c334 999592
asterisk-ooh323_1.8.10.1~dfsg-1_amd64.deb
4ab0d5efb9786444355c89218ae9bfda3770c7d4 595374
asterisk-mp3_1.8.10.1~dfsg-1_amd64.deb
92397da008e2ab80bd5ad9d1e58815fed6466db7 619574
asterisk-mysql_1.8.10.1~dfsg-1_amd64.deb
4a3a4274851c9e3ae558d7013f4d79d45a06ab0d 608468
asterisk-mobile_1.8.10.1~dfsg-1_amd64.deb
56d3cfcc4d7f9824e9556af929575dc2e287beb3 29486524
asterisk-dbg_1.8.10.1~dfsg-1_amd64.deb
Checksums-Sha256:
45845eb457d8da703816e77364c0ce1c5c7011d8ce150902024f36886cb769b3 2997
asterisk_1.8.10.1~dfsg-1.dsc
e7aece673e965f33bd2108cd89364a8c30b712bc3ded8ecfdb10370b3e7ccf50 7661601
asterisk_1.8.10.1~dfsg.orig.tar.gz
68c87c16142156cce4d2b2e842ecd198995ab9f56aad893ecd41801522896d8b 349229
asterisk_1.8.10.1~dfsg-1.debian.tar.gz
63ce771a2673456bb35bd4e12b68472cefe8b70bfe1163690086cbc548c960bb 1954736
asterisk-doc_1.8.10.1~dfsg-1_all.deb
266362f35b71a8e987a98c27005cafe6dd031df00d6c3a0261de77a60614b2eb 918686
asterisk-dev_1.8.10.1~dfsg-1_all.deb
1f396cdad0aca052a3b6fed07395757415c78ae800dfa4fed77e46aa6b0cfeaf 969962
asterisk-config_1.8.10.1~dfsg-1_all.deb
0cdb70619de5b367072829bdc2b8e577fc29d9c61be4b00fb395f918af5d8657 1712720
asterisk_1.8.10.1~dfsg-1_amd64.deb
d54cf6b24df64c75c627b3a6c2109c2f948c8e51cc0d180affe53ad7e31905c0 2786026
asterisk-modules_1.8.10.1~dfsg-1_amd64.deb
b13690bb0fa1cc41a9122f0d3bae6bb5d45c879d4b25ea24024d6b797b0f6daf 876686
asterisk-dahdi_1.8.10.1~dfsg-1_amd64.deb
fcb1ebef8ddcb8728a9fad6c8dd6c33d4c3e365ef792e9f1de69e735a57ee191 653442
asterisk-voicemail_1.8.10.1~dfsg-1_amd64.deb
169f33fa8af2263c7bb34eb37b0e7811ebf4a9d9a5121b0c35da5cb377218d58 668866
asterisk-voicemail-imapstorage_1.8.10.1~dfsg-1_amd64.deb
90d892341924bdcbe6b627d6b471e5f656dcf0a350790901c83e32c52aeebc09 659460
asterisk-voicemail-odbcstorage_1.8.10.1~dfsg-1_amd64.deb
1580f5639984f5e5554df224ba1c2fd82aa1f1da5364e4e77963a08073ef61ad 999592
asterisk-ooh323_1.8.10.1~dfsg-1_amd64.deb
cca4edfc26d75ad017ef18a131b78c9835150ba3a2a97b0400e0b5eccdc159bb 595374
asterisk-mp3_1.8.10.1~dfsg-1_amd64.deb
dfc532cdd3a7128fe80df8fe7f97d969b06387a6880cf8ff737ad063ca3636ff 619574
asterisk-mysql_1.8.10.1~dfsg-1_amd64.deb
eee36af698d7c04fe24829ff62f943ac28e1c056491ce98dc4d7e444898f3570 608468
asterisk-mobile_1.8.10.1~dfsg-1_amd64.deb
fdf12b126eedfb11af0d1b7f66591e258676c63a9123b97c46327b4a3ff308d0 29486524
asterisk-dbg_1.8.10.1~dfsg-1_amd64.deb
Files:
02e8792bc9e373d6f22fc6105854f6e4 2997 comm optional
asterisk_1.8.10.1~dfsg-1.dsc
608c26eb9cf45d909b68333f586c5a5a 7661601 comm optional
asterisk_1.8.10.1~dfsg.orig.tar.gz
e68347caff4d87831fe563614812161b 349229 comm optional
asterisk_1.8.10.1~dfsg-1.debian.tar.gz
726b838c19825f4247399c00b98fecf8 1954736 doc extra
asterisk-doc_1.8.10.1~dfsg-1_all.deb
771d13186613e58cadb433d1798f8f58 918686 devel extra
asterisk-dev_1.8.10.1~dfsg-1_all.deb
496fd3c1bcd61fdc2f4fda3dfa39f204 969962 comm optional
asterisk-config_1.8.10.1~dfsg-1_all.deb
a909581c8e4d65d1c4bb4e12ca7a09e5 1712720 comm optional
asterisk_1.8.10.1~dfsg-1_amd64.deb
6eb1ee09b1036379e0405183d458fdfe 2786026 libs optional
asterisk-modules_1.8.10.1~dfsg-1_amd64.deb
6bbfe41e9b251654493d703982043b74 876686 comm optional
asterisk-dahdi_1.8.10.1~dfsg-1_amd64.deb
7d24f21e9d9e4cc9132dae0657de344e 653442 comm optional
asterisk-voicemail_1.8.10.1~dfsg-1_amd64.deb
1e222c549f2353dcf2b18a1ae582ecc7 668866 comm optional
asterisk-voicemail-imapstorage_1.8.10.1~dfsg-1_amd64.deb
bf6022f6887949d2f025e3d975230c70 659460 comm optional
asterisk-voicemail-odbcstorage_1.8.10.1~dfsg-1_amd64.deb
c11c1bb8565fa971927d218fc99c5795 999592 comm optional
asterisk-ooh323_1.8.10.1~dfsg-1_amd64.deb
415a112f264ca580c3efcc64a35721e8 595374 comm optional
asterisk-mp3_1.8.10.1~dfsg-1_amd64.deb
819bae109852fbcf2b6ecc27edfaecca 619574 comm optional
asterisk-mysql_1.8.10.1~dfsg-1_amd64.deb
c53cfa01d347f969676596c5ee589c65 608468 comm optional
asterisk-mobile_1.8.10.1~dfsg-1_amd64.deb
a20bf26490757f35bfa7a7fa3cad189d 29486524 debug extra
asterisk-dbg_1.8.10.1~dfsg-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
iEYEARECAAYFAk92PfoACgkQoCzanz0IthKMFACeNxGS1Vf0nbS+m6sylxXFy30y
82MAn1PWnQgTsVr6TSMeTsBlRxgCmo3Q
=j3Pe
-----END PGP SIGNATURE-----
--- End Message ---
