Source: nss-pem Version: 1.1.0+1-1.1 Severity: serious Your package's copyright file misrepresents the contained licenses:
BSD-3-clause references the wrong license file (GPL-2). The zlib files are claimed to be licensed under BSD-3-clause but it is actually the Zlib license. The License: GPL-2 stanza has the "or-later" clause but this is not found in the upstream files that reference this license.
