Your message dated Wed, 8 Jan 2020 11:20:56 +0200
with message-id <20200108092053.ga10...@tty.gr>
and subject line Re: Bug#947816: GeoLite2 databases are now non-free
has caused the Debian Bug report #947816,
regarding GeoLite2 databases are now non-free
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
947816: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=947816
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: geoipupdate
Severity: serious
Hello maintainer,
Unfortunately, it seems that MaxMind have changed their policies on GeoLite2
databases such that they now require a license key. In addition (and more
critically), they are no longer licensed under a Creative Commons BY-SA
license, and now are under a custom EULA.
I reviewed the EULA (https://www.maxmind.com/en/geolite2/eula) and, while I am
neither an attorney nor a debian-legal faux-counsel, the agreement seems to
violate the DFSG in several regards.
First, it places restrictions on fields of endeavor -- specifically, that you
may not use the data for Fair Credit Reporting Act purposes, including
determining whether a person may be granted credit, eligible for insurance, for
employment purposes, or any other purpose governed by the FCRA.
Second, you are no longer permitted to redistribute the data except by binding
them to the EULA.
Third, you are required to check in with MaxMind regularly and destroy old
versions of the dataset within 30 days. This seems to violate several
long-standing interpretations of the DFSG including the desert island test and
the tentacles of evil test.
Based on this license change, it seems to me that geoipupdate can no longer be
in main. Contrib may be a suitable home, however?
Sincerely,
--
Harlan Lieberman-Berg
~hlieberman
--- End Message ---
--- Begin Message ---
On Tue, Dec 31, 2019 at 11:48:31AM -0500, Harlan Lieberman-Berg wrote:
> Nope; that’s what I get for filing bugs while sleep deprived.
>
> Sorry for the spam!
No worries! Cc'ing -done to resolve this. BTW, if you're interested in
the topic, there is a thread on debian-legal on the availability of
those databases going forward.
Regards,
Faidon
--- End Message ---
