Source: libhdf4 Version: 4.2.16-4 Severity: important
Please update to the latest upstream version. 4.3.0 has the following changelog entry, which I would like to see in the Debian package:
"The XDR I/O library has been refactored into an internal, minimalist I/O layer with a different name. It is no longer necessary (or even possible) to link to an external XDR library like TI-RPC, and XDR-related configuration options have been removed."
It will get rid of the mfhdf/xdr/* files that have a non-free license (which is undocumented in d/copyright by the way).