[Debian-med-packaging] Bug#726778: libvistaio: GPL code not mentioned in debian/copyright, license incorrect

[Luke Faraone]

Package: libvistaio
Version: 1.2.14-1
Severity: serious
Justification: Policy 12.5

Dear maintainer,

On a review of your package in NEW, I found that vistaio_change_names.py
was GPL-licensed but this is not mentioned in debian/copyright.

These files are LGPLed:
 vistaio-1.2.15\vistaio\type.c
 vistaio-1.2.15\vistaio\history.c
Please document this.

In addition, your package does not appear to be under the "BSDlike"
license you state in debian/copyright. Compare the file with vistaio-1.2.15\vistaio\volumesType.c:

 *  Permission to use, copy, modify, distribute, and sell this software and its
 *  documentation for any purpose is hereby granted without fee, provided that
 *  the above copyright notice appears in all copies and that both that
 *  copyright notice and this permission notice appear in supporting
 *  documentation. UBC makes no representations about the suitability of this
 *  software for any purpose. It is provided "as is" without express or
 *  implied warranty.

These seem to conflict with vistaio-1.2.15\COPYING. Given the confusion, I
would recommend checking with upstream to see what is the actual license, but
I'm inclined to go with the license in the specific files.

Cheers,

Luke Faraone
FTP Team

-- System Information:
Debian Release: wheezy/sid
  APT prefers precise-updates
  APT policy: (500, 'precise-updates'), (500, 'precise-security'), (500, 'precise'), (100, 'precise-backports')
Architecture: amd64 (x86_64)

Kernel: Linux 3.5.0-41-generic (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash