Jamie Nguyen <[email protected]> writes:

> I opened a bug report for the 'ledger' package:
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741740

The salient part of that report, for the sake of discussion in this
forum:

* The ‘ledger’ package (source and binary) in Debian includes files
  ‘lib/sha1.h’ and ‘lib/sha1.cpp’.

* ‘debian/copyright’ does not mention those two files, implying that the
  main copyright notice and license applies. But that is not true: the
  files have a different copyright notice, and no license explicitly
  granted.

* Those two files appear to match a work without a DFSG-compliant license.

> I wanted to check on this list that my assessment is correct.

Given your description, I think you have identified a violation of the
DFSG. Thank you.

I will comment at the bug report <URL:https://bugs.debian.org/741740>.

-- 
 \      “[Entrenched media corporations will] maintain the status quo, |
  `\       or die trying. Either is better than actually WORKING for a |
_o__)                  living.” —ringsnake.livejournal.com, 2007-11-12 |
Ben Finney


-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
Archive: https://lists.debian.org/[email protected]

Reply via email to