Package: xz-utils Version: 4.999.8beta-1 Severity: serious User: [email protected] Usertags: origin-ubuntu karmic
Hello! It seems that the license of the package needs further examination. It cannot be Public Domain, since it is derived from the "lzma" package. This is supported by both http://tukaani.org/lzma/history and the file headers for things like src/liblzma/lzma/lzma_encoder.c. So this is not correct: Files: src/liblzma/* License: PD liblzma is in the public domain. It does appear to be LGPL, so it's not a giant issue, but this package should be more carefully reviewed for copyright issues. Thanks, -Kees -- Kees Cook @debian.org -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]

