Your message dated Sat, 22 Apr 2023 05:08:35 +0200
with message-id 
<caknhny80mqmd8kysknopgokfxlz2a7r-r-9mpcetqyxbmka...@mail.gmail.com>
and subject line Re: Bug#777595: update-notifier: Wrong license in 
debian/copyright (compared to COPYING)
has caused the Debian Bug report #777595,
regarding update-notifier: Wrong license in debian/copyright (compared to 
COPYING)
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
777595: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=777595
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: update-notifier
Severity: serious
Version: 0.99.3debian8 0.99.3debian11

Both, the Squeeze version[1] as well as the Wheezy version[2] of this
package claim in debian/copyright that it's licensed under the "GNU
Lesser General Public License version 2" (or later) despite the facts
that

a) a "version 2" of the GNU Lesser General Public License never
   existed[3], and

b) the file COPYING in the same tar ball[4][5] clearly contains the GNU
   General Public License version 2 and neither the GNU Lesser General
   Public License version 2.1 not the GNU Library General Public License
   version 2.0 (which would be the closest name matches to mentioned
   non-existing license).

[1] 
https://sources.debian.net/src/update-notifier/0.99.3debian8/debian/copyright/
[2] 
https://sources.debian.net/src/update-notifier/0.99.3debian11/debian/copyright/
[3] https://www.gnu.org/licenses/old-licenses/old-licenses.html#LGPL
[4] https://sources.debian.net/src/update-notifier/0.99.3debian11/COPYING/
[5] https://sources.debian.net/src/update-notifier/0.99.3debian11/COPYING/

debian/copyright seems to refer to src/update-notifier.c which sports
the same non-existing license[6][7].

[6] 
https://sources.debian.net/src/update-notifier/0.99.3debian8/src/update-notifier.c/#L7
[7] 
https://sources.debian.net/src/update-notifier/0.99.3debian11/src/update-notifier.c/#L7

Even if you do not intend to do an (old)stable update for this issue,
please at least clarify the license in this bug report to allow others
to fork your work under the correct license.

My interpretation is the following:

* debian/copyright as well as src/update-notifier.c both refer to a
  non-existing license.

* They do not refer to an explicit file in /usr/share/common-licenses/
  but claim that the license should have been received "along with this
  library".

* "Along with this library", there is only the GPL (in the file
  COPYING), but none of its LGPL-abbreviated relatives.

* This looks like a failed and incomplete relicensing attempt from
  GPL-2+ to LGPL-2.1+.

* The GPL-2 is a stricter version of at least the LGPL-2.1.

So it should be safe to asssume that the software can be at least copied
under the terms of the GPL-2 and probably also GPL-2+.

But then again, IANAL. So any clarification is appreciated.

-- System Information:
Debian Release: 7.8
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/6 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

--- End Message ---
--- Begin Message ---
Source: gnome-packagekit
Source-Version: 3.10.1-1

Am Fr., 21. Apr. 2023 um 16:15 Uhr schrieb Andreas Beckmann <a...@debian.org>:
>
> On 21/04/2023 14.36, Matthias Klumpp wrote:
> > This RC bug has nothing to do with gnome-packagekit, and
> > update-notifier was deleted from the archive in 2014. Was this issue
> > reassigned in error?
>
> No. update-notifier was a transitional package built from
> src:gnome-packagekit in jessie, so you (as maintainer) probably know
> best what to do with this bug (e.g. close it as fixed in the version of
> src:gnome-packagekit that dropped the transitional package (or even as
> fixed in the version that introduced the transitional package since that
> probably replaced the copyright file entirely)).

This is really a zombie bug, the code that this was reported for
doesn't exist anymore in Debian for almost 9 years - so it could have
been closed immediately...

Anyway, closing it now in the version of GPK that transitioned away
from update-notifier.

Cheers,
    Matthias

-- 
I welcome VSRE emails. See http://vsre.info/

--- End Message ---

Reply via email to