[Pkg-kde-extras] libofx contains non-free software

[Thomas Bushnell BSG]

Hi: I'm the Debian maintainer for libofx and for gnucash.  I'm writing
to you because you are responsible (in some fashion) for the maintenance
of packages which depend on libofx.

Unfortunately, it has come to light that libofx contains non-free
software.  Importantly, the DTD files which describe the format of OFX
data files are apparently non-free.  I am in communication with libofx
upstream about the issue.

It is possible that this will be resolved without too much pain, but I
think it is unlikely.  I recall having been told that the newer
aqbanking stuff does not depend on libofx--but I'm not sure how accurate
this is, because there is still libaqofxconnect4 which does depend on
it.

There are two possible short term resolutions: one is to remove libofx
from Debian entirely.  The other is to remove only the offending DTD
files, which will cripple its operation.

I am writing to give you a "heads up" about this.  If you have a
particular preference for one way or other to deal with the situation,
please reply (to all of us, not just to me) with your suggestions.
However, we cannot permit libofx to remain with non-free files unless we
have a speedy and quick fix.

If no such fix appears, and if the correct approach is to remove libofx
completely from Debian, the result will be that your packages in
unstable will become uninstallable and likely FTBFS.  I will make sure
to file bug reports with severity "important" if I have made a decision
to take that step, and then once the removal happens, the bugs will need
to get upgraded to "serious".

You may wish to subscribe to BTS #460407 as well.

Thomas