Bug#954092: meshlab: none

[Ryan Pavlik]

Package: src:meshlab
Version: 2020.02+git200217-1
Severity: serious
Justification: Policy 2.3
Tags: pending
Owner: ryan.pavlik at gmail.com

Dear Maintainer,

The recently uploaded 2020.02+git200217-1 package has some DFSG
violations - some of which are file-exclusions that got lost in the new
package, while others are newly found. The "newly found" one I'll
consider key for this bug is use of GPL-incompatible source (ISC license
with a "do not sell it" clause added) in a GPL package: three files in
the "filter_screened_poisson" plugin.

I have forwarded this particular issue upstream since it affects their
binaries as well (they might be essentially not redistributable):
<https://github.com/cnr-isti-vclab/meshlab/issues/583> Subsequently I
fixed that by removing the files in question and applying modifications
based on another, compatible source (the issue is in a vendored
project's vendored project, neither of which are packaged in Debian or
intended for anything other than standalone usage or source integration
by upstreams.) This patch was applied upstream.

I have inspected the source and restored the list of "Files-Excluded" in
debian/copyright (including all the previously-listed files that their
exclusion is still applicable, and adding additional new files that
should be excluded for DFSG or source-missing reasons), and added a
script that can generate the dfsg-cleaned repacked upstream tarball.
(They're using Git with a submodule).

My repacked version, which removes problematic files and patches a
number of issues (including a version of the patch applied upstream to
fix the filter_screened_poisson filter) is ready for review and uploaded
to https://mentors.debian.net/package/meshlab . The source is up at
https://salsa.debian.org/rpavlik-guest/meshlab - I have not pushed it to
the science team repo out of courtesy since it hasn't been reviewed yet.
However, I think it's ready to go.  (The system information below
reflects my installation of my own package on Buster, but I have set the
version entry in the header correctly.)

Ryan

-- System Information:
Debian Release: 10.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-debug'), (500,
'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.4.0-0.bpo.3-amd64 (SMP w/16 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE,
TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8),
LANGUAGE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages meshlab depends on:
ii  lib3ds-1-3              1.3.0-9+b1
ii  libc6                   2.28-10
ii  libgcc1                 1:8.3.0-6
ii  libglew2.1              2.1.0-4
ii  libglu1-mesa [libglu1]  9.0.0-2.1+b3
ii  libglx0                 1.1.0-1
ii  libgmp10                2:6.1.2+dfsg-4
ii  libgomp1                8.3.0-6
ii  libmuparser2v5          2.2.6.1+dfsg-1
ii  libopenctm1             1.0.3+dfsg1-2+b1
ii  libopengl0              1.1.0-1
ii  libqhull7               2015.2-4
ii  libqt5core5a            5.11.3+dfsg1-1+deb10u3
ii  libqt5gui5              5.11.3+dfsg1-1+deb10u3
ii  libqt5network5          5.11.3+dfsg1-1+deb10u3
ii  libqt5opengl5           5.11.3+dfsg1-1+deb10u3
ii  libqt5script5           5.11.3+dfsg-3
ii  libqt5widgets5          5.11.3+dfsg1-1+deb10u3
ii  libqt5xml5              5.11.3+dfsg1-1+deb10u3
ii  libqt5xmlpatterns5      5.11.3-2
ii  libstdc++6              8.3.0-6

Versions of packages meshlab recommends:
pn  chemical-mime-data  <none>

meshlab suggests no packages.

-- no debconf information