[From nobody Tue Apr  7 08:04:14 2026
Received: (at submit) by bugs.debian.org; 16 Jan 2021 07:35:53 +0000
X-Spam-Checker-Version: SpamAssassin 3.4.2-bugs.debian.org_2005_01_02
 (2018-09-13) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-9.5 required=4.0 tests=BAYES_00,DKIM_SIGNED,
 DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM,HAS_PACKAGE,
 RCVD_IN_MSPIKE_BL,RCVD_IN_MSPIKE_L3,RCVD_IN_SBLXBL,RCVD_IN_SBLXBL_CBL,
 RCVD_IN_SBLXBL_SBL,SPF_HELO_NONE,SPF_PASS,TXREP,XMAILER_REPORTBUG
 autolearn=ham autolearn_force=no
 version=3.4.2-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 37; hammy, 147; neutral, 45; spammy,
 0. spammytokens: hammytokens:0.000-+--H*UA:1.10.1, 0.000-+--H*u:1.10.1,
 0.000-+--H*UA:2018-07-13, 0.000-+--H*u:2018-07-13,
 0.000-+--H*M:reportbug
Return-path: <d.filder@web.de>
Received: from mout-xforward.web.de ([82.165.159.45]:49111)
 by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.92) (envelope-from <d.filder@web.de>) id 1l0g7k-0001Zk-Sf
 for submit@bugs.debian.org; Sat, 16 Jan 2021 07:35:53 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=web.de;
 s=dbaedf251592; t=1610782548;
 bh=sePrKrGVssksliU/D2VbBUo+B2/52IS1ps9t7EhzoZQ=;
 h=X-UI-Sender-Class:Date:From:To:Subject:Reply-To;
 b=ocjo4XeHnzcc7nwV9RdywQbd9cy5Gc8H5CqEVXiZy9uBpKQ9xkM/eKYdOPwBtMyX0
 UwpQxPWIDdtDr4DXcfUN6HREVk0Mnv6pYANrZCJQuTm7x5qOSlX641ei9fwjTMSdTH
 O/Sj7j3cTSGhU3LIEJIuly9oqnAtilL0nqNj7+Ig=
X-UI-Sender-Class: c548c8c5-30a9-4db5-a2e7-cb6cb037b8f9
Received: from reader ([195.206.105.217]) by smtp.web.de (mrweb106
 [213.165.67.124]) with ESMTPSA (Nemesis) id 1MBS6v-1lCXQx1Nr5-00CviQ; Sat, 16
 Jan 2021 08:35:48 +0100
Received: by reader (Postfix, from userid 1000)
 id 5E5F3848; Sat, 16 Jan 2021 08:35:40 +0100 (CET)
Date: Sat, 16 Jan 2021 08:35:40 +0100
From: Dennis Filder <d.filder@web.de>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: gnome-screensaver may have dubious copyright provenance
Message-ID: <161078081764.23093.3164042752520262324.reportbug@reader>
Reply-To: d.filder@web.de
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
X-Mailer: reportbug 7.5.3~deb10u1
User-Agent: Mutt/1.10.1 (2018-07-13)
X-Provags-ID: V03:K1:FQ1Vhyhz5EdHun6cIonyfHk1jUK9gaV8dszBnI3bP9w5J7uXo2X
 plVU1EwrfjIvWXjPKhrY4UvvYqdixAVwR8pJShP8Om48nu7zR182guR+dZlPgsrHsmbF30E
 ZiuoFlN60HM/xJlilaM2V2epi4CzYJdEp5KH4mp1Ob2lyg8s5AjAGOQYzGLw7wi39CAFVbe
 Dx4aFTe+kmlKw88bP3+dQ==
X-UI-Out-Filterresults: junk:10;V03:K0:Kh25SzGB+tk=:Mxkpa9VNns4qgwNeeRy36S1/
 cYijJaErpulFrI6KuMQjQivFhEF7LMk44U0e3IVFgOQsXaodmv7tA5aR9GO+Finq4Xqyh4kqX
 N3fPo95NwoAlXJo7CrykDBk98RqKXEM22YdOxQHVlPaiYIyrw766QP/e8Rv1oYPHIOQjCQtOD
 iyciBww0unN2K3AXTlmyPQvyHi5QOzqiUCtXHHulYn0yiOEJ5ohPH8yFKEO+k+846rpTjOefr
 i78bFAyGh5wMvlg6QVaPXehoAs1NdacvPP09xH0reATWPQbeQyA83hCJ+62Pb5rTuCJ2mJDJf
 OyOmHMnJWfLgRFQGXqGGTtHvj9xwvntwaQyUrojKR+nJXdM43ldToRkfixiMRYq110+CQvyxt
 T/IBsIZ/LKpkwunkO/EPkpO2gr38tJ47EQeMuZpzK0zMSj2L7FSzBJMjpzLluvpYSmw9Q1AUM
 8Z/Darc539iiewP1jfzoO87S36ogE0CO583ELZJx7d2HwZcG2DDIFF15iWnENnm6gV821PBcb
 jt6G2xcOFQsSPb9y/0DJUMXAI3ysjgyI0D1SjvxGvUpcM7wWElNArOwEFkQgjfncSeG6K0IV5
 SXkT2C5NQwt2oDsOM2UM2VAjSRyIoPNFa2X9H2S760OtsabvflqdEWNLsHXtn6z7+zD0kaDYS
 sprfi5I/PGIZodaKWdumFCJSUnA8RQ2UncmgAtoRSL44UYxNkQujR2UjF5ZThFBifHPTfwn69
 pL8npoErFt5cuA/EepI9tJG9myVp6ghXmRP+2QZFVHHdE8ozzLD/DaxrRAmEBfr/26uD72VPU
 gRZZBFGl6HbkSEoiHnH8J8KBrBWunQI45MowasRHOQqa8qNU+X+PQHqVtsKqK+/bvi0hghCiC
 Fk3qf7VlWcCeXJk5ol3Vc9Whi6cvr+cHAskAMIsR1ymKXsGLLiZBBvNNAU6w
Delivered-To: submit@bugs.debian.org

Package: gnome-screensaver
Severity: normal

Dear Maintainer,

under [1] the author of XScreenSaver (BSD license) claims that one of
the authors of gnome-screensaver copied his code and replaced the
original licensing and copyright information with a GPL-2 stanza and
added his own copyright statement in the process.  Thus probably all
versions of gnome-screensaver are affected, and the originating
version would be either XSS 4.23, 4.24, 5.00 or 5.01 as those were the
releases made in 2006, the earliest year in the GPL-2 copyright
stanza.

A quick comparison of gnome-screensaver/src/gs-grab-x11.c and
xscreensaver-5.45+dfsg1/driver/lock.c appears to corroborate this:
xfree_lock_grab_smasher() in XSS and xorg_lock_smasher_set_active() in
GSS are preceded by an identical comment and have common variable
names.  I haven't looked further into this, but I wouldn't be
surprised if a lot more was copied.

Furthermore, cinnamon-screensaver and mint-screensaver are affected by
the same issue since they are apparently forks of gnome-screensaver.

It seems advisable to consult debian-legal to see how big of a problem
this is and if it renders these packages undistributable.


Regards.

1: https://www.jwz.org/blog/2021/01/i-told-you-so-2021-edition/
]