Package: bluez-bcm203x Version: 2.10-4 Severity: serious [Previously discussed via private mail with maintainer. I'm going ahead and reporting this to have it recorded somewhere.]
From the description of bluez-bcm203x: > Firmware loader for Broadcom 203x based Bluetooth devices > This package contains a firmware loader for users of the 2.4 Linux > kernel and Broadcom 203x based Bluetooth devices. From debian/copyright of the non-free bluez-firmware package, which contains the firmware this package can load: > The BlueZ project has permission from Broadcom Corporation to > distribute this firmware in conjunction with the BlueZ GPLd > tools, available in Debian as bluez-utils, as long as the notice > contained in /usr/share/doc/bluez-firmware/BCM-LEGAL.txt accompanies > the firmware. > > This arrangement was made with BlueZ author Max Krasnyansky > <[EMAIL PROTECTED]>. This raises many issues: * Since bluez-bcm203x seems to exist only to load this non-free firmware, it should have a "Depends: bluez-firmware" rather than "Suggests: bluez-firmware". * For the same reason, the bluez-bcm203x package should be moved to contrib. * The indicated grant of permission to distribute requires that the distribution be "in conjunction with the BlueZ GPLd tools, available in Debian as bluez-utils". Given that non-free isn't part of Debian, it seems difficult to argue that the bluez-firmware package in non-free is being distributed "in conjunction with" the blues-utils package in main, or even a bluez-bcm203x package in contrib. - Josh Triplett
signature.asc
Description: OpenPGP digital signature