[Pkg-xfce-devel] Bug#763063: Licensing issue on images files

Clément Hermann (nodens) nodens at nodens.org
Sat Sep 27 16:01:34 UTC 2014

Package: thunar-volman
Version: 0.8.0-4
Severity: important


while preparing my packaging of Tails' OpenPGP Applet (ITP #756404), it was
pointed to me that there were issues on images files shipped with it : they
where licensed using CC-BY-SA 2.0, which is not DFSG-compliant. They seemed
indeed derived from icons using an old tango theme, which were indeed licensed
CC-BY-SA 2.0 at the time.

I saw that on my Sid system, several packages have the same issue :

~$ rgrep -rl 'by-sa/2\.0' /usr/share/icons/*/scalable |xargs dlocate --package-only

There may be more, since it only reports the packages I have installed.
It doesn't seem to be dual-licensing, judging from the content of the svg files

So, I asked on debian-devel but received very few responses, mostly
inconclusives or saying we should allow CC-BY-SA 2.0 in debian [1] [2]

This is not an issue in the package I work on anymore, since I could remake the
icons and include them upstream. However, I think it's best to track this issue
and maybe clarify once and for all what to do with CC-BY-SA 2.0 images.

Currently, I see the following options : 
- convincing upstream to relicense the files using a later (>= 3.0) version of the license, which, as I found out, can be difficult
- removing or replacing the files
- decide that CC-BY-SA 2.0 is OK after all.


[1] https://lists.debian.org/debian-devel/2014/08/msg00073.html
[2] https://lists.debian.org/debian-devel/2014/09/msg00725.html

Clement Hermann (nodens)

-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages thunar-volman depends on:
ii  exo-utils       0.10.2-4
ii  libc6           2.19-11
ii  libexo-1-0      0.10.2-4
ii  libglib2.0-0    2.40.0-5
ii  libgtk2.0-0     2.24.24-1
ii  libgudev-1.0-0  215-4
ii  libnotify4      0.7.6-2
ii  libpango-1.0-0  1.36.7-1
ii  libxfce4ui-1-0  4.10.0-6
ii  libxfce4util6   4.10.1-2
ii  libxfconf-0-2   4.10.0-3
ii  thunar          1.6.3-1

thunar-volman recommends no packages.

thunar-volman suggests no packages.

-- no debconf information

More information about the Pkg-xfce-devel mailing list