Your message dated Wed, 15 Jan 2025 10:43:53 +0000
with message-id <e1ty0sl-008g8m...@fasolo.debian.org>
and subject line Bug#1091999: fixed in parser 3.5.1-1
has caused the Debian Bug report #1091999,
regarding parser3-cgi: Contains incompatible license combination
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1091999: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1091999
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: parser3-cgi
Version: 3.4.5-1
Severity: serious
parser3-cgi and libapache2-mod-parser3 combine GPL licensed files with the
RSA-MD licensed files in src/lib/md5.
RSA-MD is incompatible with any GPL version because of its advertisement clause:
"""
License is also granted to make and use derivative works provided
that such works are
identified as "derived from the RSA Data
Security, Inc. MD5 Message-Digest Algorithm"
in all material
mentioning or referencing the derived work.
"""
Also, the Apache-1.1 license used in those files is problematic with GPL.
--- End Message ---
--- Begin Message ---
Source: parser
Source-Version: 3.5.1-1
Done: Yavor Doganov <ya...@gnu.org>
We believe that the bug you reported is fixed in the latest version of
parser, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1091...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Yavor Doganov <ya...@gnu.org> (supplier of updated parser package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 11 Jan 2025 17:01:44 +0200
Source: parser
Architecture: source
Version: 3.5.1-1
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <packa...@qa.debian.org>
Changed-By: Yavor Doganov <ya...@gnu.org>
Closes: 1073580 1091999
Changes:
parser (3.5.1-1) unstable; urgency=medium
.
* QA upload.
* New upstream release.
- Fixes license incompatibility (Closes: #1091999).
* Run wrap-and-sort -ast.
* debian/patches/pcre2.patch: Delete; applied upstream.
* debian/patches/libxml2-2.12.patch: Likewise.
* debian/patches/103_auto_p.patch: Likewise.
* debian/gbp.conf: New file.
* debian/operators.ru.txt: Delete; now present in upstream tarball.
* debian/parser3-common.docs: Install both operators.* files.
* debian/examples/index.ru.html: Update from the canonical URL.
* debian/README.source: Remove redundant stuff.
* debian/control (Build-Depends): Add bison; sometimes the build fails
because of that.
* debian/tests/control: New file.
* debian/tests/adequate: New test.
* debian/tests/parse: Likewise.
* debian/rules (override_dh_auto_test): New; run the parse test.
* debian/clean: New file; delete parse artifacts.
* debian/copyright: Perform an audit of the code; add missing stanzas,
add more copyright holders, fix many discrepancies (Closes: #1073580).
Thanks Phil Wyett. Update copyright years. Explain why Debian
distributes the package under GPL-3. Remove src/include/pa_hash.h:
upstream clarified that the file is under GPL-2+ (only the integer
arrays were taken from a file under Zend/PHP license but all of them
have been replaced in this release).
Checksums-Sha1:
4e67dfb184f70f53178e7a712ced32c327e6d758 2057 parser_3.5.1-1.dsc
04b87b9f0169d6717e655f4d22e8f4856ed0202c 1562497 parser_3.5.1.orig.tar.gz
215c5736ffefcf51ea50cfd2bab6839e5144a698 27008 parser_3.5.1-1.debian.tar.xz
29bd0be2036ca1f2d48d6835c0da9b9b53f71f9f 6654 parser_3.5.1-1_source.buildinfo
Checksums-Sha256:
afc7c28df42a0b8dc0367c59bc4f17536e30a67fd87414eaf95c77bf2d115049 2057
parser_3.5.1-1.dsc
232e291303195cf90b04282f7177e2c8c0f1a7b11fd69c8ef608d2502d04dac3 1562497
parser_3.5.1.orig.tar.gz
931f864600db30249cd077edc09605d01aef8555809549b4085125bea2f45ecb 27008
parser_3.5.1-1.debian.tar.xz
a7c0d61dfb0cb497ad8e9613aeba44c875ac0e9dd5f3f619d62fb6ea0179e2a8 6654
parser_3.5.1-1_source.buildinfo
Files:
31f0c597080a8dc24ce085ac593917b9 2057 web optional parser_3.5.1-1.dsc
77b44c7d1fa96861317745a7eca104c1 1562497 web optional parser_3.5.1.orig.tar.gz
9b4edf85a79457c95c994287f8d6b1e9 27008 web optional
parser_3.5.1-1.debian.tar.xz
ddfa6462f6c13178e33b9e05de68d796 6654 web optional
parser_3.5.1-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=Kpu2
-----END PGP SIGNATURE-----
pgpfND_hAzf5D.pgp
Description: PGP signature
--- End Message ---