https://bugzilla.novell.com/show_bug.cgi?id=672495 https://bugzilla.novell.com/show_bug.cgi?id=672495#c1 --- Comment #1 from Jörg Schiling 2011-02-27 11:51:48 UTC --- The information about the legal problems with libcdio is publically available since 2007, please make sure not to distribute libcdio with the upcoming Suse 11.4 release. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=672495 https://bugzilla.novell.com/show_bug.cgi?id=672495#c3 Ciaran Farrell changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |joerg.schilling@fokus.fraun | |hofer.de --- Comment #3 from Ciaran Farrell 2011-03-31 12:34:14 UTC --- (In reply to comment #0)

There are two problems related to libcdio

1) libcdio contains code from cdda2wav that has been published under "GPLv2 only" but libcdio claims it is under another GPL variant

Which files carry the notice?

2) libcdio is publiched under GPL and called from LGPL code. The FSF claims that it is not permitted to use GPL code from code that is not under GPL.

I do not understand (2) I presumed that this bug substantially repeats what was discussed in bnc#672491 but the bug reporter of that bug never closed that bug, so maybe my presumption is wrong. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=672495 https://bugzilla.novell.com/show_bug.cgi?id=672495#c5 --- Comment #5 from Ciaran Farrell 2011-04-07 09:53:35 UTC ---

...

Which files carry the notice?

The GPL is a work based license, so see libcdio-0.82/COPYING

Let me rephrase the question: which "code from cdda2wav that has been published under GPLv2 only" (your words) has been included in libcdio? If you could point me to the files which are taken from cdda2wav it would be helpful.

...

...

2) libcdio is publiched under GPL and called from LGPL code. The FSF claims that it is not permitted to use GPL code from code that is not under GPL.

I do not understand (2)

I presumed that this bug substantially repeats what was discussed in bnc#672491 but the bug reporter of that bug never closed that bug, so maybe my presumption is wrong.

Why do you believe this?

This is of course a different problem.

Fair enough. As I stated, I was making a presumption. It appears that this presumption was not accurate. ..

See also: https://bugzilla.gnome.org/show_bug.cgi?id=3D413705

'3D413705' is not a valid bug number nor an alias to a bug -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=672495 https://bugzilla.novell.com/show_bug.cgi?id=672495#c7 Ciaran Farrell changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |sbrabec@novell.com InfoProvider|joerg.schilling@fokus.fraun |sbrabec@novell.com |hofer.de | --- Comment #7 from Ciaran Farrell 2011-04-07 13:10:35 UTC --- Stano, can I ask you to review two things: (1). with respect to libcdio, the upstream code claims to be GPLv3+ but our spec files say GPLv2+. Were there GPLv2 "only" licenses in libcdio prior to the time that the GPLv3 license was released. It looks like the FSF batch updated their license strings. If there was GPLv2 "only" in there, perhaps they did not see it. If, however, all the license strings referred to GPLv2 "or later", then I can see why they would have done this. (2). with respect to the status of libcdio in openSUSE in general and gnome in particular, if we were to accept that this plugin is either GPLv2+ or GPLv3+ licensed (in any event GPL licensed), what components come in contact with libcdio? (3). the reporter refers to libgstcdda2wav.so. Without examining now any other aspect of that, do you know if that is a drop-in replacement for libcdio? I could not find that shared library anywhere in the build service. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=672495 https://bugzilla.novell.com/show_bug.cgi?id=672495#c9 Stanislav Brabec changed: What |Removed |Added ---------------------------------------------------------------------------- InfoProvider|sbrabec@suse.com |cfarrell@suse.com --- Comment #9 from Stanislav Brabec 2011-12-12 20:09:46 CET --- (2) If I understand correctly, all applications that use or load libcdio are "infected" by GPL-3.0: - GPL-3 only: OK, no change - GPL-3 only: OK, no change - GPL-2 or later: after linking it is GPL-3 or later - GPL-2 only: impossible, violation I just inspected all RPMs in Factory: for i in *.rpm ; do if rpm -q --requires -p $i | zgrep -q 'libcdio.so.12()(64bit)' ; then echo $i ; fi ; done clementine.rpm gstreamer-0_10-plugins-ugly.rpm gvfs-backends.rpm libcddb-utils.rpm libcdio++0-mini.rpm libcdio++0.rpm libcdio_cdda0-mini.rpm libcdio_cdda0.rpm libcdio-mini-utils.rpm libcdio_paranoia0-mini.rpm libcdio_paranoia0.rpm libcdio-utils.rpm libiso9660-7-mini.rpm libiso9660-7.rpm libudf0-mini.rpm libudf0.rpm vcdimager.rpm xmms2-plugin-cdda.rpm Directly affected applications: clementine, Music Player, GPL-3.0 => OK Applications affected via plugin systems: gstreamer-0_10: Everything that uses gstreamer-0_10 with gstreamer-0_10-plugins-ugly and loads libcdio plugin is "infected" by GPL-3.0. It is used by Qt and many GNOME applications, WebKit etc. => Bad. gvfs plugin system: Everything that uses gvfs and loads libcdio plugin is "infected" by GPL-3.0. It seems to be currently used directly just by GIO modules gvfsdbus and gioremote-volume-monitor. I am not sure, but I guess that applications using GIO connect to GVFS (and libcdio) via FUSE. I don't know whether it is a legal way to have a GPL-3+ filesystem for kernel FUSE. xmms2-plugin-cdda, CD player plugin for xmms2, GPL+ or Artistic => forces GPL-3.0+ to the whole xmms2 and packages that use xmms2 plugin system (3) I am not aware of any other drop-in replacements of libcdio. This is a single purpose library that provides easy API to work with Compact Discs. Should I try to contact upstream (libcdio, gstreamer. gvfs, xmms2) to introduce them to problems they caused by upgrade to GPL-3+? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=672495 https://bugzilla.novell.com/show_bug.cgi?id=672495#c11 --- Comment #11 from Dave Plater 2012-04-15 10:57:34 UTC --- Where can one find the source for "libgstcdda2wav.so"? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.