#1136135 source package in main contains non-free POSIX Manual Pages

#1136135#5
Date:
2026-05-10 01:21:57 UTC
From:
To:
This source package contains manual pages that are basically equivalent to those in the manpages-posix and manpages-posix-dev packages in upstream/archlinux/man0p, upstream/archlinux/man1p, and upstream/archlinux/man3p. These are taken from POSIX Issue 7 and to make these manual pages available in the first place required special permission from the IEEE and The Open Group to reproduce the standard.

In fact, translating these pages is probably prohibited as a derivative work.

In wondering how this was able to slip through, I noticed that debian/copyright doesn't specify any licensing information for the upstream/ subdirectory which is in this source package. This directory contains a lot of original man pages copied from other distros and I don't see it practical to review them all—are they really a meaningful part of the source for this package?

#1136135#12
Date:
2026-05-10 06:21:44 UTC
From:
To:
Hello John,
thanks for your analysis.

I see 3 issues from your report.

1. The source packages contains undistributable man pages.

   Yes, unfortunately archlinux mixes Linux man pages and POSIX man
   pages in one package, hence these pages went in the upstream set.

   To remedy this specific problem, I'll prune those pages from the
   upstream set, make a new upstream bug fix release and a new Debian
   release. This should fix the problem in Unstable.

   For Trixie, I can provide an according backport, as I do regularly.
   However, it needs to be discussed what the best fix would be there.
   My personal preference would be to make an according upload to
   "stable-proposed-updates" or whatever.

2. There are missing licensing information

   So far, our skripts for the Debian package only analyse the files
   actually shipped in the binary package, where you can find a complete
   list in debian/copyright.

   Having done dozens of L10N NMUs I noticed that these lists are
   often not well maintained, especially when looking for translations
   (they are often forgotten). So I don't think this is a serious bug
   (probably important).

   To address these, I would include an upstream infrastructure to
   list the licences of all upstream man pages. But since licensecheck
   does not detect all of them, this cannot happen overnight.

3. These undistributable pages "slipped through"

   As upstream, another script would then (in the future) check if
   there are new man pages introduced and their license would be
   inspected and only shipped upstream if they allow distribution.
   This way, *in the future* no such page could "slip in".

And one question:
[Are] they really a meaningful part of the source for this package?

Yes. To rebuild the translations in a reproducible way you need to
transform the original man pages (from the dates they were pulled form
the various distributions) into template files, which are then synched
with the po files from the translators and transformed into translated
man pages. You can find more about the general worflow in po4a(1).

If I missed something, please let me know.

Greetings

         Helge

#1136135#17
Date:
2026-05-11 17:20:32 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
manpages-l10n, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1136135@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Dr. Helge Kreutzmann <debian@helgefjell.de> (supplier of updated manpages-l10n package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Mon, 11 May 2026 16:51:11 +0200
Source: manpages-l10n
Architecture: source
Version: 4.30.2-1
Distribution: unstable
Urgency: medium
Maintainer: Dr. Helge Kreutzmann <debian@helgefjell.de>
Changed-By: Dr. Helge Kreutzmann <debian@helgefjell.de>
Closes: 1136135
Changes:
 manpages-l10n (4.30.2-1) unstable; urgency=medium
 .
   * New upstream version 4.30.2.
   * This version no longer contains the undistributable upstream man pages.
     Additionally, the licenses of the upstream man pages are now determined.
     This is incomplete yet (covering ~ 48%), but will be expanded over the
     coming time. (Closes: #1136135).
   * Update d/copyright
Checksums-Sha1:
 058f8dc3e8753477711fc034098c3f9029dac27d 4010 manpages-l10n_4.30.2-1.dsc
 10bf165238406dd0d481d6fd8163a79f133196a1 145952264 manpages-l10n_4.30.2.orig.tar.bz2
 57a656104c984d22852aa1afa6d03d2203dce017 89840 manpages-l10n_4.30.2-1.debian.tar.xz
 b472e2f43a2981214f5d1a3a4f1351f035ed48dd 15134 manpages-l10n_4.30.2-1_amd64.buildinfo
Checksums-Sha256:
 e63a8ac55af26f8c8ea9df8ee77dde8ca18b4401edfacf98a059ea2b59567d82 4010 manpages-l10n_4.30.2-1.dsc
 76ca506b6ac548b3649cb9d95f15384d0698c0881f547ae3c771e5048c1a3311 145952264 manpages-l10n_4.30.2.orig.tar.bz2
 13d95729efc3875508e346533c1b11b559099581d0bd96b7a9b4cd6ec8ba7668 89840 manpages-l10n_4.30.2-1.debian.tar.xz
 bdfbe408e7b3fca121a9db09b3e2b346174b07fdc385c6a7697e10ea3dbc5fcb 15134 manpages-l10n_4.30.2-1_amd64.buildinfo
Files:
 6b09f26749f447e7664ce773b969f107 4010 doc optional manpages-l10n_4.30.2-1.dsc
 501965e8374bc62127843c694b74ac76 145952264 doc optional manpages-l10n_4.30.2.orig.tar.bz2
 7f5f7376407d3ffe5f0d519867e6dae5 89840 doc optional manpages-l10n_4.30.2-1.debian.tar.xz
 2230afd3d73cf049cf4f64d636b2b6ed 15134 doc optional manpages-l10n_4.30.2-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEbZZfteMW0gNUynuwQbqlJmgq5nAFAmoCC8AACgkQQbqlJmgq
5nDJKRAAsQuKsVSorbZWohBwaqkKiCGnXCvhO3C62E1mRb7Fo184P1KH8HDQqbTO
vC6/ACkhvlJyNMImOPjKpgnTyW1YGmYlSpp6w8YrlpaaeAHL/yxFgpK66yEcQ+sb
jxlzZjMBqsiFPlzGslI90aC3IQDJ6XbLE/lCb9QVEiMaRaYo3QSt95Ccw1L6FST4
wPYoJst6VKEyWehwSoYMtbsBV66aQQYGWvtZFzSzTouDVo3j7ofO+dB3dh68W8GM
15ciegaAg5MZmvlXue66JYnN7ij9NDlf5DPj+2NtOdnip9ZfNZfCdqElVuQjBUYO
Ss90Yfs/IMXUgjCVkAy0z79wQh1maIFaKndjzmAEhrkVuSiEHjg8Zk18N8nWdiJb
p+ZBAwby6kVR4YT8DND7pbIxGRaOpWULEK7zyY+R0tDArKqrpWt17CXZuwSZoQHU
1E2a06gwbS82ONcMDysMFlhyfdjYs5KgadJmCrAWzILvYcLwZo0gvFjadPS5PNdD
ZvNnEhn+pkHho1ejGs2OXOYM9TnHFBze/457g8pNWuJbmz53ZPEEHKWkDimL3myW
RodUg9KLauaL0asIce9omRqbh9u6dnHgMRuen/QMk7ErWXnEi7QcPI4WfJvHUIgI
M2uZibKDHIgtrAneFZZTh3LvN9GWOjvisupVhiFgxFfLLJMsuEI=
=+qW9
-----END PGP SIGNATURE-----