Package: fbpanel
Version: 7.0-2
Severity: serious
Justification: Policy 4.5

Hello,
many thanks for fixing the recently reopened bug #585795 so quickly!

I was taking a look at the debian/copyright file [1] and I noticed that
the license for my two icons is not correctly described.

[1] https://tracker.debian.org/media/packages/f/fbpanel/copyright-7.0-2

The debian/copyright file of fbpanel/7.0-2 states:

  Files: debian/terminal_color.svg debian/terminal_sketch.svg
  Copyright: 2011-2012 Francesco Poli
  License: GPL-2

which is correct (well, almost: I rediscovered that the actual
copyright year is 2010, sorry for stating otherwise previously...),
but then the stanza for GPL-2 says "either version 2 of the License,
or (at your option) any later version.", which is *not* correct!
It would be OK for GPL-2+, but I only licensed the two
icons under GPL-2 (that is to say, version 2 *only*!).

The correct license information should be:

  Files: debian/terminal_color.svg debian/terminal_sketch.svg
  Copyright: 2010 Francesco Poli
  License: GPL-2

and

  License: GPL-2
   This work is free software; you can redistribute it and/or modify
   it under the terms of the GNU General Public License as published by
   the Free Software Foundation; version 2 dated June, 1991.
   .
   This work is distributed in the hope that it will be useful,
   but WITHOUT ANY WARRANTY; without even the implied warranty of
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
   GNU General Public License for more details.
   .
   You should have received a copy of the GNU General Public License
   along with this package; if not, write to the Free Software Foundation,
   Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA.
  Comment: On Debian systems, the complete text of the GNU General
   Public License version 2 can be found in the file
   `/usr/share/common-licenses/GPL-2'.


Moreover, and even *more importantly*, I took a look a the fbpanel/7.0-2
source tree.
I cannot find any indication that fbpanel is actually under GPL-2
or GPL-2+ !!!!

There are a number of files with no embedded licensing information
and a general COPYING file which, I assume, describes the copying
conditions for those files. This COPYING file is almost identical
to the Expat license [2] (it only misses an "OR COPYRIGHT HOLDERS"
in the disclaimer of warranty).

[2] http://www.jclark.com/xml/copying.txt

There are other files with different copyright holders, which
embed licensing information and seem to be licensed under LGPL-2+ ...
Maybe other files are under different (hopefully compatible!) licenses.

Please review the licensing status of the entire source tree and
document it properly in the debian/copyright file!

Thanks for your time.
Bye!

Reply via email to