Review: libcec 8.1.6+dfsg-1
Package Information
| Description | USB CEC Adaptor communication Library (development files) This library provides support for the Pulse-Eight USB-CEC adapter and other CEC capable hardware, like the Raspberry Pi. This package provides the necessary files needed for development. |
|---|---|
| Maintainer | Barak A. Pearlmutter <bap@debian.org> |
| Changed By | Barak A. Pearlmutter <bap@debian.org> |
| Distribution | unstable |
| Architecture | any all |
| VCS | git: https://salsa.debian.org/debian/libcec.git (browse) |
| Closes | #1134169 |
| Popcon Installs | 2210 |
| Binary NEW | Yes (binary-only upload) |
| Tracker | https://tracker.debian.org/pkg/libcec |
| Uploaded | 13 days ago |
Potential Library Transition
The maintainer says no transition is needed and asked us to review anyway.
I've already filed for a transition, see bugs.debian.org/1144469 I'd note that this is a trivial transition, because the ABI changes leading to the SO bump are not relevant to the packages using libcec. I'd further note that this upload contains a handful of security fixes. So although libcec is niche enough that I don't think we need to bring in formal security stuff, I would hope to get this through rapidly, which suggests that doing the review and setting up the transition in parallel would make sense.
— bap, 13 days ago
New Package Report
.changes
| Changed-By | Barak A. Pearlmutter |
|---|---|
| Architecture | source amd64 all |
| Distribution | unstable |
| Date | Wed, 12 Aug 2026 08:53:51 +0100 |
| Source | libcec |
| Version | 8.1.6+dfsg-1 |
Changelog
libcec (8.1.6+dfsg-1) unstable; urgency=medium
.
* Bump standards version
* New upstream version 8.1.6
* Repack to drop prebuilt Windows binaries (support/windows/*.exe,
support/windows/libusb0.dll); debian/copyright Files-Excluded and
+dfsg suffix
* SONAME bump, rename libcec7 to libcec8
* Upstream no longer uses p8-platform: drop libp8-platform-dev
build dep and the include/platform symlink
* Drop 03_reproducible_build.patch: superseded by upstream
DISABLE_BUILDINFO option, now passed by debian/rules
* Drop 04_fix_pkgconfig_libdir.patch: fixed upstream
* Install new cmake package config files
* Build with dh_python3 so python module is installed where interpreter
can find it; ship the _pycec extension module alongside cec.py;
without either, python3-libcec was unusable (closes: #1134169)
* New binary package librust-libcec-dev, the upstream Rust binding,
shipping the crate source under /usr/share/cargo/registry. Skipped
with build profile pkg.libcec.norust
* New binary package node-libcec, the upstream Node.js N-API addon,
built with node-gyp rather than cmake's ENABLE_NODE_LIB which would
need network access. Skipped with build profile pkg.libcec.nonodejs
* The .NET binding is not packaged
* debian/copyright: document AOCEC, IMX, Linux and EventGhost copyright
holders, and the vendored AMD ADL SDK headers
* Drop pkg-kde-tools build dependency, unused since d/symbols was
replaced by d/shlibs
* Bump debhelper compat to 14
- dh_dwz is no longer in the default sequence, which only grows
the -dbgsym packages
- cmake is automatically passed -DCMAKE_BUILD_RPATH_USE_ORIGIN=ON
* Strip libcec.a from debian/rules: dh_strip has a bug which makes it
think this static library is a text file and not strip it (NOTE:
remove this stanza when https://bugs.debian.org/875780 is fixed.)
* Move debian/ man pages to debian/man/, write one for pyCecClient, and
remove cec-config.1 which was unused..dsc
| Priority | optional |
|---|---|
| Component | main |
| Package-List | cec-utils deb utils optional arch=any libcec-dev deb libdevel optional arch=any libcec8 deb libs optional arch=any librust-libcec-dev deb rust optional arch=all profile=!pkg.libcec.norust profile:v1=!pkg.libcec.norust node-libcec deb javascript optional arch=any profile=!pkg.libcec.nonodejs profile:v1=!pkg.libcec.nonodejs python3-libcec deb python optional arch=any |
| Section | utils |
debian/copyright
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ Upstream-Name: libcec Upstream-Contact: Lars Op den Kamp <lars.opdenkamp@pulse-eight.com> Source: https://github.com/Pulse-Eight/libcec Files-Excluded: support/windows/libusb0.dll support/windows/p8-usbcec-bootloader-driver-installer.exe support/windows/p8-usbcec-driver-installer.exe Comment: The excluded files are prebuilt Windows binaries shipped without corresponding source, so they are removed from the repacked +dfsg tarball. Files: * Copyright: 2011-2015, Pulse-Eight Limited. License: GPL-2+ Comment: Alternatively, you can license this library under a commercial license, please contact Pulse-Eight Licensing for more information. . For more information contact: Pulse-Eight Licensing <license@pulse-eight.com> http://www.pulse-eight.com/ http://www.pulse-eight.net/ Files: debian/* Copyright: 2011, Andres Mejia <amejia@debian.org> License: GPL-2+ Files: src/libcec/adapter/Exynos/* Copyright: 2014, Valentin Manea 2011-2015, Pulse-Eight Limited. License: GPL-2+ Files: src/libcec/adapter/AOCEC/* Copyright: 2016, Gerald Dachs 2014, Valentin Manea 2011-2015, Pulse-Eight Limited. License: GPL-2+ Files: src/libcec/adapter/IMX/* Copyright: 2013, Stephan Rafin 2011-2013, Pulse-Eight Limited. License: GPL-2+ Files: src/libcec/adapter/Linux/* Copyright: 2017-2019, Jonas Karlman 2016, Gerald Dachs 2014, Valentin Manea 2011-2015, Pulse-Eight Limited. License: GPL-2+ Files: src/EventGhost/egplugin_sources/PulseEight/* Copyright: 2005-2016, EventGhost Project <http://www.eventghost.org/> 2011-2015, Pulse-Eight Limited. License: GPL-2+ Files: src/libcec/platform/adl/adl-edid.cpp src/libcec/platform/adl/adl-edid.h Copyright: 2011-2015, Pulse-Eight Limited. License: GPL-2+ Files: src/libcec/platform/adl/adl_defines.h src/libcec/platform/adl/adl_sdk.h src/libcec/platform/adl/adl_structures.h Copyright: 2008-2012, Advanced Micro Devices, Inc. License: AMD-ADL-SDK License: AMD-ADL-SDK THIS CODE AND INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND/OR FITNESS FOR A PARTICULAR PURPOSE. Comment: These are headers from AMD's Display Library (ADL) SDK, vendored by upstream. They declare the types and entry points that adl-edid.cpp resolves with dlopen() to read an EDID from an AMD driver at run time; nothing links against ADL at build time. . The notice reproduced above is the entire copyright notice the files carry: it disclaims warranty but grants no permission to use, copy, modify or redistribute. The terms of the AMD ADL SDK licence agreement under which upstream obtained them are not reproduced in the source. License: GPL-2+ This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; version 2 dated June, 1991, or (at your option) any later version. . On Debian systems, the complete text of version 2 of the GNU General Public License can be found in '/usr/share/common-licenses/GPL-2'.
Review Information
rejected — allocated to mechtilde 11 days ago, started 11 days ago, completed 11 days ago.
Final Comment
Hi,
this package is rejected because of missing free licenses.
The detailed description you can find them in the public notes.
Please report it to upstream. Only the upstream author can relicense
these files.
It doesn't fit the DFSG.
Thansk
Public Notes
11 days ago
● public
Load licenses database
Command: dnq license-check -prepare
Exit code: 0
License check [main]:
Found 2 unique license identifier(s) in debian/copyright:
COMPATIBLE (1):
GPL-2+ [GPL-2 or later; compatible with Apache-2.0 via GPL-3]
UNKNOWN (not in DFSG license database):
AMD-ADL-SDK (manually verify DFSG compatibility)
Result: ATTENTION REQUIRED
- 1 unrecognized license(s) require manual review
11 days ago
● public
Load licenses database
Command: dnq license-check -prepare
Exit code: 0
License check [main]:
Found 2 unique license identifier(s) in debian/copyright:
COMPATIBLE (1):
GPL-2+ [GPL-2 or later; compatible with Apache-2.0 via GPL-3]
UNKNOWN (not in DFSG license database):
AMD-ADL-SDK (manually verify DFSG compatibility)
Result: ATTENTION REQUIRED
- 1 unrecognized license(s) require manual review
Files: src/libcec/platform/adl/adl_defines.h
src/libcec/platform/adl/adl_sdk.h
src/libcec/platform/adl/adl_structures.h
Copyright: 2008-2012, Advanced Micro Devices, Inc.
License: AMD-ADL-SDK
License: AMD-ADL-SDK
THIS CODE AND INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND,
EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED
WARRANTIES OF MERCHANTABILITY AND/OR FITNESS FOR A PARTICULAR PURPOSE.
Comment: These are headers from AMD's Display Library (ADL) SDK, vendored by
upstream. They declare the types and entry points that adl-edid.cpp resolves
with dlopen() to read an EDID from an AMD driver at run time; nothing links
against ADL at build time.
.
The notice reproduced above is the entire copyright notice the files carry:
it disclaims warranty but grants no permission to use, copy, modify or
redistribute. The terms of the AMD ADL SDK licence agreement under which
upstream obtained them are not reproduced in the source.
This is not a valid license text. So this isn't DFSG conform.
It hist the 'Tentacles of evil'
"The Debian Policy extents this requirement for all licences. The Debian Policy
does not exclude the Debian source packages (see Chapter 4 of the Debian Policy)
from this requirement. That also means the files in the Debian source package
have to be covered by a (free) license ("Tentacles of evil")."
This is also a GPL violation.