#981439 liblivemedia: includes non-free code from RFC 3550

#981439#5
Date:
2021-01-31 10:35:34 UTC
From:
To:
Let's turn this into a bug.
----- Forwarded message from Joerg Jaspert <ftpmaster@ftp-master.debian.org> -----

Date: Thu, 15 Oct 2020 21:00:09 +0000
From: Joerg Jaspert <ftpmaster@ftp-master.debian.org>
To: Sebastian Ramacher <sramacher@debian.org>, Debian Multimedia Maintainers <debian-multimedia@lists.debian.org>
Subject: liblivemedia_2020.08.19-1_multi.changes REJECTED
Message-Id: <E1kTAM5-0002v6-Ra@fasolo.debian.org>


Hi,

unfortunately we have to reject this package:

This package contains non-free code copied from RFC 3550.
RFC 3550 was written in 2003, prior to the modifications to the relicensing
of RFCs in 2005 to make the code written in RFC licensed under an open
source license. Debian confirmed this non-free interpretation in bug 92810.

Additionally, in this package, there are several files that have a
copyright header but no explicit license attached, other than "all
rights reserved".  Two even state "this code may not be copied or used in
any form without permission from Live Networks, Inc."

Installed by liblivemedia-dev:
- usr/include/livemedia/HMAC_SHA1.hh ("this code may not...")
- usr/include/livemedia/HMAC_hash.hh ("this code may not...")
- usr/include/livemedia/liveMedia_version.hh (just version #defines)
- usr/include/groupsock/groupsock_version.hh (just version #defines)
- usr/include/UsageEnvironment/UsageEnvironment_version.hh (just version #defines)
- usr/include/BasicUsageEnvironment/BasicUsageEnvironment_version.hh (just version #defines)

orig.tar.gz (excludes files mentioned above):
- live/liveMedia/HMAC_SHA1.cpp ("this code may not...")
- live/liveMedia/SRTPCryptographicContext.cpp ("this code may not...")
- live/liveMedia/rtcp_from_spec.{c,h} is copied from RFC 3550 and draft-ietf-avt-rtp-new-11 which were written prior to 2005 and are thus non-free per bug 92810.
- live/mediaServer/version.hh (All rights reserved, but only version #defines)
----- End forwarded message -----
#981439#14
Date:
2021-02-01 22:20:52 UTC
From:
To:
Dear submitter,

as the package liblivemedia has just been removed from the Debian archive
unstable we hereby close the associated bug reports.  We are sorry
that we couldn't deal with your issue properly.

For details on the removal, please see https://bugs.debian.org/981451

The version of this package that was in Debian prior to this removal
can still be found using http://snapshot.debian.org/.

Please note that the changes have been done on the master archive and
will not propagate to any mirrors until the next dinstall run at the
earliest.

This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
ftpmaster@ftp-master.debian.org.

Debian distribution maintenance software
pp.
Joerg Jaspert (the ftpmaster behind the curtain)

#981439#27
Date:
2026-08-22 20:30:00 UTC
From:
To:
Dear Debian maintainers,

I've been in touch with Henning Schulzrinne, who is the author of the
code in question, and he agreed to explicitly put the code under the
3-clause BSD license. That should resolve all doubt about whether
liblivemedia from live555 can be included in Debian.

Henning, could you please reply-all to this email with the same text
that you sent me yesterday? (Actually, could you make one small
change: Add a 1-line paragraph "Copyright 2003 Henning Schulzrinne"
before "Redistribution and use..." just so that your name is in the
declaration itself?)

#981439#32
Date:
2026-08-22 20:38:39 UTC
From:
To:
As the author of RFC 3550 Appendix A.7, I agree to license it under the
3-clause BSD license:

Copyright 2003 Henning Schulzrinne, Steve Casner, Ron Frederick, Van
Jacobson

Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are met:

(1) Redistributions of source code must retain the above copyright notice,
this list of conditions and the following disclaimer.

(2) Redistributions in binary form must reproduce the above copyright
notice, this list of conditions and the following disclaimer in the
documentation and/or other materials provided with the distribution.

(3) The name of the authors may not be used to endorse or promote products
derived from this software without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN
NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.