Package: 2.8.0-1 Severity: serious Flagging as serious because it's a policy violation.
autotools files, and install-sh, in various directories not accounted for in d/copyright. distro/deb presumably is GPL-3+ without the SSL exception. contrib/ does not have the OpenSSL exception either ... is that code compiled into the main executable, or not? src/contrib has all sorts of licensing, most of which which is not accounted for in d/copyright. Copyright years for `Files: *` stanza need updating. src/contrib/ucw/lists.c is listed as GPL-3+? The original copyright date is before that license had been published. tests-fuzz/main.c has a different license. Copyright holders and licensing for tests/tap is wrong. It's not just Russ, and some of the files are GPL. Thanks to Sean Whitton for pointing this out! --dkg
signature.asc
Description: PGP signature