[GNU-linux-libre] Nonfree jpegxr in ghostscript

[Michał Masłowski]

Hello.  A user found a nonfree library source being bundled with
Ghostscript.

jpegxr has the following license (jpegxr/COPYRIGHT.txt in ghostscript
source tree):

/*************************************************************************
*
* This software module was originally contributed by Microsoft
* Corporation in the course of development of the
* ITU-T T.832 | ISO/IEC 29199-2 ("JPEG XR") format standard for
* reference purposes and its performance may not have been optimized.
*
* This software module is an implementation of one or more
* tools as specified by the JPEG XR standard.
*
* ITU/ISO/IEC give You a royalty-free, worldwide, non-exclusive
* copyright license to copy, distribute, and make derivative works
* of this software module or modifications thereof for use in
* products claiming conformance to the JPEG XR standard as
* specified by ITU-T T.832 | ISO/IEC 29199-2.
*
* ITU/ISO/IEC give users the same free license to this software
* module or modifications thereof for research purposes and further
* ITU/ISO/IEC standardization.
*
* Those intending to use this software module in products are advised
* that its use may infringe existing patents. ITU/ISO/IEC have no
* liability for use of this software module or modifications thereof.
*
* Copyright is not released for products that do not conform to
* to the JPEG XR standard as specified by ITU-T T.832 |
* ISO/IEC 29199-2.
*
* Microsoft Corporation retains full right to modify and use the code
* for its own purpose, to assign or donate the code to a third party,
* and to inhibit third parties from using the code for products that
* do not conform to the JPEG XR standard as specified by ITU-T T.832 |
* ISO/IEC 29199-2.
* 
* This copyright notice must be included in all copies or derivative
* works.
* 
* Copyright (c) ITU-T/ISO/IEC 2008, 2009.
***********************************************************************/

This license forbids making modifications that do not comply with the
ITU standard and might have other issues.

The GNU Ghostscript bug report is at [0].  The library is included since
release 9.04.1, upstream has it since 9.01.

Debian removes that library, so it should be already fixed in derived
distros.

Should we update the #GPL_Ghostscript_CMap_data_files entry of the
non-FSDG list to recommend removing that library (or updating to a
future GNU Ghostscript version without it, or using Debian's cleaned
source)?

[0] https://savannah.gnu.org/support/index.php?108621

pgpQjGkBoAip7.pgp
Description: PGP signature