Bug#732960: iceweasel: includes non-DFSG-free bsdiff.c

Stephen Kitt skitt at debian.org
Mon Dec 23 07:05:59 UTC 2013


Package: iceweasel
Version: 17.0.10esr-1~deb7u1
Severity: serious
Tags: upstream
Justification: Policy 2.2.1

Dear Maintainer,

While reviewing the licenses used in wine-gecko (basically Firefox 21
in the version I'm reviewing), I came across
other-licenses/bsdiff/bsdiff.c which uses the "BSD Protection
License", which is non-free (see
https://lists.debian.org/debian-legal/2003/10/msg00344.html for a
discussion of the license).

bsdiff has since been relicensed using the 2-clause BSD license, see
http://svnweb.freebsd.org/base/stable/9/usr.bin/bsdiff/bsdiff/bsdiff.c?revision=231812&view=markup
for the current version.

I'm not sure bsdiff actually ends up being used in the build or the
resulting binaries...

Regards,

Stephen


-- Package-specific info:

-- Extensions information
Name: Adblock Plus
Location: ${PROFILE_EXTENSIONS}/{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
Status: enabled

Name: Default theme
Location: /usr/lib/iceweasel/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}
Package: iceweasel
Status: enabled

Name: English (GB) Language Pack locale
Location: /usr/lib/iceweasel/extensions/langpack-en-GB at iceweasel.mozilla.org.xpi
Package: iceweasel-l10n-en-gb
Status: enabled

Name: ErrorZilla Mod
Location: ${PROFILE_EXTENSIONS}/ErrorZillaMod at jaybaldwin.xpi
Status: enabled

Name: Firebug
Location: ${PROFILE_EXTENSIONS}/firebug at software.joehewitt.com.xpi
Status: enabled

Name: Français Language Pack locale
Location: /usr/lib/iceweasel/extensions/langpack-fr at iceweasel.mozilla.org.xpi
Package: iceweasel-l10n-fr
Status: enabled

Name: Greasemonkey
Location: ${PROFILE_EXTENSIONS}/{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
Status: enabled

Name: Link Widgets
Location: ${PROFILE_EXTENSIONS}/linkwidget at clav.mozdev.org
Status: enabled

Name: QuakeLive.com Game Launcher
Location: ${PROFILE_EXTENSIONS}/quakeliveplugin at idsoftware.com
Status: enabled

Name: Tab Mix Plus
Location: ${PROFILE_EXTENSIONS}/{dc572301-7619-498c-a57d-39143191b318}.xpi
Status: enabled

Name: Tamper Data
Location: ${PROFILE_EXTENSIONS}/{9c51bd27-6ed8-4000-a2bf-36cb95c0c947}
Status: enabled

Name: Web Developer
Location: ${PROFILE_EXTENSIONS}/{c45c406e-ab73-11d8-be73-000a95be3b12}.xpi
Status: enabled

Name: YSlow
Location: ${PROFILE_EXTENSIONS}/yslow at yahoo-inc.com.xpi
Status: enabled

-- Plugins information
Name: DivX® Web Player
Location: /usr/lib/mozilla/plugins/libtotem-mully-plugin.so
Package: totem-mozilla
Status: enabled

Name: Garmin Communicator
Location: /usr/lib/mozilla/plugins/npGarminPlugin.so
Package: garmin-plugin
Status: enabled

Name: Quake Live
Location: /home/steve/.mozilla/firefox/poqdot3f.default/extensions/quakeliveplugin at idsoftware.com/plugins/npquakelive.x64.so
Status: enabled

Name: QuickTime Plug-in 7.6.6
Location: /usr/lib/mozilla/plugins/libtotem-narrowspace-plugin.so
Package: totem-mozilla
Status: enabled

Name: Shockwave Flash (11,2,202,332)
Location: /usr/lib/flashplugin-nonfree/libflashplayer.so
Status: enabled

Name: VLC Multimedia Plugin (compatible Videos 3.8.2)
Location: /usr/lib/mozilla/plugins/libtotem-cone-plugin.so
Package: totem-mozilla
Status: enabled

Name: Windows Media Player Plug-in 10 (compatible; Videos)
Location: /usr/lib/mozilla/plugins/libtotem-gmp-plugin.so
Package: totem-mozilla
Status: enabled


-- Addons package information
ii  garmin-plugin  0.3.20-1     amd64        browser plugin for communication 
ii  iceweasel      17.0.10esr-1 amd64        Web browser based on Firefox
ii  iceweasel-l10n 1:17.0.10esr all          English (United Kingdom) language
ii  iceweasel-l10n 1:17.0.10esr all          French language package for Icewe
ii  totem-mozilla  3.8.2-3      amd64        Totem Mozilla plugin

-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable'), (200, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.11-2-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages iceweasel depends on:
ii  debianutils         4.4
ii  fontconfig          2.11.0-2
ii  libc6               2.17-97
ii  libgdk-pixbuf2.0-0  2.28.2-1+b1
ii  libglib2.0-0        2.38.0-1
ii  libgtk2.0-0         2.24.22-1
ii  libnspr4            2:4.10.2-1
ii  libnspr4-0d         2:4.10.2-1
ii  libsqlite3-0        3.8.2-1
ii  libstdc++6          4.8.2-1
ii  procps              1:3.3.4-2
ii  xulrunner-17.0      17.0.10esr-1~deb7u1

iceweasel recommends no packages.

Versions of packages iceweasel suggests:
ii  fonts-stix [otf-stix]  1.1.0-1
ii  libgssapi-krb5-2       1.11.3+dfsg-3+nmu1
pn  mozplugger             <none>

Versions of packages xulrunner-17.0 depends on:
ii  libasound2                1.0.27.2-3
ii  libatk1.0-0               2.10.0-2
ii  libbz2-1.0                1.0.6-5
ii  libc6                     2.17-97
ii  libcairo2                 1.12.16-2
ii  libdbus-1-3               1.6.18-2
ii  libdbus-glib-1-2          0.100.2-1
ii  libevent-2.0-5            2.0.21-stable-1
ii  libfontconfig1            2.11.0-2
ii  libfreetype6              2.5.1-1
ii  libgcc1                   1:4.8.2-1
ii  libgdk-pixbuf2.0-0        2.28.2-1+b1
ii  libglib2.0-0              2.38.0-1
ii  libgtk2.0-0               2.24.22-1
ii  libhunspell-1.3-0         1.3.2-6
ii  libjpeg8                  8d-2
ii  libmozjs17d               17.0.10esr-1~deb7u1
ii  libnspr4                  2:4.10.2-1
ii  libnss3                   2:3.15.3.1-1
ii  libnss3-1d                2:3.15.3.1-1
ii  libpango1.0-0             1.36.0-1+b1
ii  libpixman-1-0             0.30.2-2
ii  libsqlite3-0              3.8.2-1
ii  libstartup-notification0  0.12-3
ii  libstdc++6                4.8.2-1
ii  libvpx1                   1.2.0-2
ii  libx11-6                  2:1.6.2-1
ii  libxext6                  2:1.3.2-1
ii  libxrender1               1:0.9.8-1
ii  libxt6                    1:1.1.4-1
ii  zlib1g                    1:1.2.8.dfsg-1

Versions of packages xulrunner-17.0 suggests:
ii  libcanberra0  0.30-2
ii  libgnomeui-0  2.24.5-2

-- no debconf information



More information about the pkg-mozilla-maintainers mailing list