Feeds

Debian components breach terms of GPLv2

You want source code with that?

Internet Security Threat Report 2014

A top Debian contributor has been left "pretty disappointed" by elements of the Debian community for failing to comply with the conditions of the GNU GPLv2 license.

Daniel Baumann, who maintains the Debian Syslinux bootloader package, has said Debian components were being released only in binary form without source code - resulting in problems for Apple Macintosh users.

"I don't want to blame individual persons," Baumann said. "This is just a note of how disappointed I'm about some parts of Debian that are not complying to licenses when it comes to distributing software."

One problem concerns Debian CD - the toolkit used to build new versions of Debian for public release. Baumann found the toolkit was using an embedded binary version of Syslinux rather than taking a full version with source code from the official Debian archive. Another instance involved the Sarge release of Debian that shipped with Syslinux 2.04 in binary and Syslinux 2.11 in source.

Baumann also found that source code for some components was missing from last November's beta version of KDE 4 - although this has now been removed from the Debian Live CDs distribution list.

The problem of synchronizing source and binary versions of Debian packages affected some Apple users last week when they tried to install the first beta release of the Lenny, the latest version Debian. Some users found their keyboard freezing up as a result of the wrong binary-only version of Syslinux being included in the package. In this case the current archive version of Syslinux (3.71) did not work - while an earlier version (3.63) embedded in Debian Installer worked fine.

Baumann has acknowledged that the problem is most likely the result of the increasingly heavy workload faced by the Debian community and the growing popularity of Debian-based Linux distros.

"It appears that as good as our package checks are, we spend little to no time to check our resulting products made from these packages," Baumann said.®

Secure remote control for conventional and virtual desktops

More from The Register

next story
Be real, Apple: In-app goodie grab games AREN'T FREE – EU
Cupertino stands down after Euro legal threats
Download alert: Nearly ALL top 100 Android, iOS paid apps hacked
Attack of the Clones? Yeah, but much, much scarier – report
You stupid BRICK! PCs running Avast AV can't handle Windows fixes
Fix issued, fingers pointed, forums in flames
Microsoft: Your Linux Docker containers are now OURS to command
New tool lets admins wrangle Linux apps from Windows
Bada-Bing! Mozilla flips Firefox to YAHOO! for search
Microsoft system will be the default for browser in US until 2020
Facebook, working on Facebook at Work, works on Facebook. At Work
You don't want your cat or drunk pics at the office
Soz, web devs: Google snatches its Wallet off the table
Killing off web service in 3 months... but app-happy bonkers are fine
prev story

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
How to determine if cloud backup is right for your servers
Two key factors, technical feasibility and TCO economics, that backup and IT operations managers should consider when assessing cloud backup.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Getting ahead of the compliance curve
Learn about new services that make it easy to discover and manage certificates across the enterprise and how to get ahead of the compliance curve.