Let's turn this into a bug.
----- Forwarded message from Joerg Jaspert <ftpmaster@ftp-master.debian.org> -----

Date: Thu, 15 Oct 2020 21:00:09 +0000
From: Joerg Jaspert <ftpmaster@ftp-master.debian.org>
To: Sebastian Ramacher <sramacher@debian.org>, Debian Multimedia Maintainers <debian-multimedia@lists.debian.org>
Subject: liblivemedia_2020.08.19-1_multi.changes REJECTED
Message-Id: <E1kTAM5-0002v6-Ra@fasolo.debian.org>


Hi,

unfortunately we have to reject this package:

This package contains non-free code copied from RFC 3550.
RFC 3550 was written in 2003, prior to the modifications to the relicensing
of RFCs in 2005 to make the code written in RFC licensed under an open
source license. Debian confirmed this non-free interpretation in bug 92810.

Additionally, in this package, there are several files that have a
copyright header but no explicit license attached, other than "all
rights reserved".  Two even state "this code may not be copied or used in
any form without permission from Live Networks, Inc."

Installed by liblivemedia-dev:
- usr/include/livemedia/HMAC_SHA1.hh ("this code may not...")
- usr/include/livemedia/HMAC_hash.hh ("this code may not...")
- usr/include/livemedia/liveMedia_version.hh (just version #defines)
- usr/include/groupsock/groupsock_version.hh (just version #defines)
- usr/include/UsageEnvironment/UsageEnvironment_version.hh (just version #defines)
- usr/include/BasicUsageEnvironment/BasicUsageEnvironment_version.hh (just version #defines)

orig.tar.gz (excludes files mentioned above):
- live/liveMedia/HMAC_SHA1.cpp ("this code may not...")
- live/liveMedia/SRTPCryptographicContext.cpp ("this code may not...")
- live/liveMedia/rtcp_from_spec.{c,h} is copied from RFC 3550 and draft-ietf-avt-rtp-new-11 which were written prior to 2005 and are thus non-free per bug 92810.
- live/mediaServer/version.hh (All rights reserved, but only version #defines)

----- End forwarded message -----

Dear submitter,

as the package liblivemedia has just been removed from the Debian archive
unstable we hereby close the associated bug reports.  We are sorry
that we couldn't deal with your issue properly.

For details on the removal, please see https://bugs.debian.org/981451

The version of this package that was in Debian prior to this removal
can still be found using http://snapshot.debian.org/.

Please note that the changes have been done on the master archive and
will not propagate to any mirrors until the next dinstall run at the
earliest.

This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
ftpmaster@ftp-master.debian.org.

Debian distribution maintenance software
pp.
Joerg Jaspert (the ftpmaster behind the curtain)

Dear Debian maintainers,

I've been in touch with Henning Schulzrinne, who is the author of the
code in question, and he agreed to explicitly put the code under the
3-clause BSD license. That should resolve all doubt about whether
liblivemedia from live555 can be included in Debian.

Henning, could you please reply-all to this email with the same text
that you sent me yesterday? (Actually, could you make one small
change: Add a 1-line paragraph "Copyright 2003 Henning Schulzrinne"
before "Redistribution and use..." just so that your name is in the
declaration itself?)

As the author of RFC 3550 Appendix A.7, I agree to license it under the
3-clause BSD license:

Copyright 2003 Henning Schulzrinne, Steve Casner, Ron Frederick, Van
Jacobson

Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are met:

(1) Redistributions of source code must retain the above copyright notice,
this list of conditions and the following disclaimer.

(2) Redistributions in binary form must reproduce the above copyright
notice, this list of conditions and the following disclaimer in the
documentation and/or other materials provided with the distribution.

(3) The name of the authors may not be used to endorse or promote products
derived from this software without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN
NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

We believe that the bug you reported is fixed in the latest version of
liblivemedia, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 981439@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Gianfranco Costamagna <locutusofborg@debian.org> (supplier of updated liblivemedia package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Mon, 28 Sep 2026 17:52:31 +0200
Source: liblivemedia
Binary: libbasicusageenvironment2 libbasicusageenvironment2-dbgsym libgroupsock33 libgroupsock33-dbgsym liblivemedia-dev liblivemedia120 liblivemedia120-dbgsym libusageenvironment3 libusageenvironment3-dbgsym livemedia-utils livemedia-utils-dbgsym
Architecture: source amd64
Version: 2026.09.23-dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Multimedia Maintainers <debian-multimedia@lists.debian.org>
Changed-By: Gianfranco Costamagna <locutusofborg@debian.org>
Description:
 libbasicusageenvironment2 - multimedia RTSP streaming library (BasicUsageEnvironment class)
 libgroupsock33 - multimedia RTSP streaming library (network interfaces and sockets
 liblivemedia-dev - multimedia RTSP streaming library (development files)
 liblivemedia120 - multimedia RTSP streaming library
 libusageenvironment3 - multimedia RTSP streaming library (UsageEnvironment classes)
 livemedia-utils - multimedia RTSP streaming tools
Closes: 981439
Changes:
 liblivemedia (2026.09.23-dfsg-1) unstable; urgency=medium
 .
   * Update watch file, from deb-multimedia liblivemedia-dmo package
   * New upstream version 2026.09.23 (Closes: #981439)
   * Update copyright file
   * Add myself to uploaders
   * Cherry-pick fixes from deb-multimedia team, thanks!
Checksums-Sha1:
 bdbf74662c614a9759d7f8baa5015bf45ad30cfb 2520 liblivemedia_2026.09.23-dfsg-1.dsc
 c995f73c7e5b27c39fa3549c146012215f0c6071 477520 liblivemedia_2026.09.23-dfsg.orig.tar.xz
 4c57166f2bab5dc1b57cc6b7e0e26dbe813c8968 21148 liblivemedia_2026.09.23-dfsg-1.debian.tar.xz
 fd80568bde910187b24526afe44d0ff710ad2ef0 43740 libbasicusageenvironment2-dbgsym_2026.09.23-dfsg-1_amd64.deb
 81ad7a54b5ab6bfbc2ba95bcfecd45bb4243c5a1 17508 libbasicusageenvironment2_2026.09.23-dfsg-1_amd64.deb
 c75827caaa4f2ddf19cef7e33131283c5e7220aa 69436 libgroupsock33-dbgsym_2026.09.23-dfsg-1_amd64.deb
 64e4f415efca0fda0c008e5b66dfef244f2c0d52 24160 libgroupsock33_2026.09.23-dfsg-1_amd64.deb
 1062455a8ddbb18f87bd5f92f814caca8bc0d936 122352 liblivemedia-dev_2026.09.23-dfsg-1_amd64.deb
 e552dc74c0e37b0c9002b39db64e70669f78bff0 1156384 liblivemedia120-dbgsym_2026.09.23-dfsg-1_amd64.deb
 a09b48021fee00fd29c454c5aa746b799b7d6391 365740 liblivemedia120_2026.09.23-dfsg-1_amd64.deb
 f09910e6dcfe43e6d204b474c2a804ddcefb5864 9088 liblivemedia_2026.09.23-dfsg-1_amd64.buildinfo
 4da2fa7bad841e35b81cc8ca1af4ccdf429b3772 9804 libusageenvironment3-dbgsym_2026.09.23-dfsg-1_amd64.deb
 d574afcb0f8cbb5862e442020d08aa499151e4ef 7288 libusageenvironment3_2026.09.23-dfsg-1_amd64.deb
 7d05b44bdd8cb4e8d53617f920ba92c806a73b73 290012 livemedia-utils-dbgsym_2026.09.23-dfsg-1_amd64.deb
 693a92e361f42838d995e4652a913a3c245229ee 84932 livemedia-utils_2026.09.23-dfsg-1_amd64.deb
Checksums-Sha256:
 8d36615ef08c129f7956b8bf44cb1a024fc55b6f6285f1f444f678302a28d3b1 2520 liblivemedia_2026.09.23-dfsg-1.dsc
 9bd0cb6b5dba1202c1da19f8160e0c7059600d90a17070133cbfcd7f287756df 477520 liblivemedia_2026.09.23-dfsg.orig.tar.xz
 8319595ba4f0595605fe8879bc265428d8a356af4a6667f111bb25f816234e4b 21148 liblivemedia_2026.09.23-dfsg-1.debian.tar.xz
 6e4f71befcab01d6149a0b13037289416b9caa98e49f691aff7735d3d9972e7f 43740 libbasicusageenvironment2-dbgsym_2026.09.23-dfsg-1_amd64.deb
 aa1eb2adf33d2a571590c354fc8c793b15c7a0302fe005d0c63a1c09f54ea39d 17508 libbasicusageenvironment2_2026.09.23-dfsg-1_amd64.deb
 01208307905c20d90ad5bb6c97f579d27b1410230228df42fd84c424804ea381 69436 libgroupsock33-dbgsym_2026.09.23-dfsg-1_amd64.deb
 6578ec30c4a9cc27514c24aafc439441066f2bdd3877e0685d08aeb971c9e994 24160 libgroupsock33_2026.09.23-dfsg-1_amd64.deb
 611a82c788df477fa6af60d672f583ef09910c6a0e95410faeb0dba68eaa4081 122352 liblivemedia-dev_2026.09.23-dfsg-1_amd64.deb
 3367a344630bf69dab683ecdaf621ce6ddb4bf7de712310dc74f8318a83eb85c 1156384 liblivemedia120-dbgsym_2026.09.23-dfsg-1_amd64.deb
 ec4dc29838757bdd6daa5f6e9debb7c8a55244b333f4c27d1108b21378fa8dbe 365740 liblivemedia120_2026.09.23-dfsg-1_amd64.deb
 a4d1fc0ad166400edb8b6327f64c312853a561ffeb77c2bb517c7e436bd30644 9088 liblivemedia_2026.09.23-dfsg-1_amd64.buildinfo
 7e4c78991b75e41e8b57b14ccdb239828eafd75da8f9c9beed29395bb210cfde 9804 libusageenvironment3-dbgsym_2026.09.23-dfsg-1_amd64.deb
 a3d53611efd24362f0de3dae7528478cd965eaaf655f5472a0107244c05590ba 7288 libusageenvironment3_2026.09.23-dfsg-1_amd64.deb
 b5d50512c652e44efc109751c809495bc67e0172ab1381363fe5fd67b441cddd 290012 livemedia-utils-dbgsym_2026.09.23-dfsg-1_amd64.deb
 aa224350e66d0c66a59c9cbf352f87cfed9d576afb7360581b5d021988178bf9 84932 livemedia-utils_2026.09.23-dfsg-1_amd64.deb
Files:
 54e1d384f31af3b9e78305601062b0d2 2520 libs optional liblivemedia_2026.09.23-dfsg-1.dsc
 dfcb4d0e12896f8ee8608f3ce5ff8ea8 477520 libs optional liblivemedia_2026.09.23-dfsg.orig.tar.xz
 10ae2956e7e1fe2674a54a57ee81560f 21148 libs optional liblivemedia_2026.09.23-dfsg-1.debian.tar.xz
 50c49c46d08aed4c60d233088361ef62 43740 debug optional libbasicusageenvironment2-dbgsym_2026.09.23-dfsg-1_amd64.deb
 8dd130c809586880a72e69cb7bb8b919 17508 libs optional libbasicusageenvironment2_2026.09.23-dfsg-1_amd64.deb
 4e7c5d8ffb2fd70121289ff2cd1ee577 69436 debug optional libgroupsock33-dbgsym_2026.09.23-dfsg-1_amd64.deb
 7e357bf8745b6a27ed418a90ab334daf 24160 libs optional libgroupsock33_2026.09.23-dfsg-1_amd64.deb
 28b8408d5e2fc0e40daf9ff0b276b958 122352 libdevel optional liblivemedia-dev_2026.09.23-dfsg-1_amd64.deb
 1b1f3b6f1dd3a097d8ffa63313275223 1156384 debug optional liblivemedia120-dbgsym_2026.09.23-dfsg-1_amd64.deb
 4433df51d93e28136552b827c4293269 365740 libs optional liblivemedia120_2026.09.23-dfsg-1_amd64.deb
 ad114a4a1389cfe170a32299b7ef9550 9088 libs optional liblivemedia_2026.09.23-dfsg-1_amd64.buildinfo
 99b132ae6150a0c94abf6e07ebec4ef0 9804 debug optional libusageenvironment3-dbgsym_2026.09.23-dfsg-1_amd64.deb
 cc673f956b9e862782ab1b5df3857d01 7288 libs optional libusageenvironment3_2026.09.23-dfsg-1_amd64.deb
 97aa0e167ae2a94f77ee1b53cd70134c 290012 debug optional livemedia-utils-dbgsym_2026.09.23-dfsg-1_amd64.deb
 f2f2a5d12cf2a60608c77095da1e6a2e 84932 net optional livemedia-utils_2026.09.23-dfsg-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
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=wc/W
-----END PGP SIGNATURE-----