Bug#785122: chocolate-doom: includes licence-incompatible GPLv3 code
Jonathan Dowland
jon at dowland.me
Tue May 12 13:17:38 UTC 2015
Package: chocolate-doom
Version: 2.1.0-1
Severity: serious
Justification: license issue
Chocolate-doom includes code taken from GnuPG, which is GPLv3, whereas
chocolate-doom is GPLv2 (or later). Upstream have fixed this by replacing
the AES implementation with one from the kernel. See
https://github.com/chocolate-doom/chocolate-doom/commit/b3678129fd7bed6c3287ab682819b075e8bf495a
For ref, the first commit introducing this code is
commit a3b3e15f4eed9aaffc56be69784cd7447cf456de
Author: Simon Howard <fraggle at gmail.com>
Date: Sat Oct 27 06:10:50 2012 +0000
The first released version to include that commit is 2.0.0, meaning
only jessie and onwards are impacted.
More information about the Pkg-games-devel
mailing list