Severity: serious
Package: lsh-utils
Version: 2.0.2-1.1
User: debian-release@lists.debian.org
Usertags: nonfree-doc rfc etch-ignore

Hi!

This source package contains the following files from the IETF under
non-free license terms:

   
lsh-utils-2.0.2.orig/lsh-2.0.2.tar.gz:lsh-2.0.2/src/nettle/testsuite/rfc1750.txt

This is essentially the same problem as in the resolved #393400, but
since nettle is included as a copy in lsh too, the problem is
manifested here as well.  See:

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=393400

You might want to adopt the same solution.

The license on RFC/I-Ds is not DFSG-free, see:
 * http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=199810
 * http://release.debian.org/removing-non-free-documentation
 * http://wiki.debian.org/NonFreeIETFDocuments

The etch release policy says binary and source packages must each be free:
 * http://release.debian.org/etch_rc_policy.txt

The severity is serious, because this violates the Debian policy:
 * http://www.debian.org/doc/debian-policy/ch-archive.html#s-dfsg

There are (at least) three ways to fix this problem.  In order of
preference:

1. Ask the author of the RFC to re-license the RFC under a free
   license.  A template for this e-mail request can be found at
   http://wiki.debian.org/NonFreeIETFDocuments

2. Remove the non-free material from the source, e.g., by re-packaging
   the upstream archive and adding 'dfsg' to the Debian package
   version name.

3. Move the package to non-free.

General discussions are kindly requested to take place on debian-legal
or debian-devel in the thread with Subject: "Non-free IETF RFC/I-Ds in
source packages".

Thanks,
Simon


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to