[pkg-gnupg-maint] Bug#1106800: gpgv-static: statically linked against glibc without a Built-Using: field

Aurelien Jarno aurel32 at debian.org
Thu May 29 21:53:22 BST 2025


Package: gpgv-static
Version: 2.1.15-9
Severity: serious
Justification: Policy 7.8

Dear maintainer,

The gpgv-static package provides /usr/bin/gpgv-static which is
statically linked against glibc.

glibc is mostly is mostly licensed under the LGPL, which requires that
the full source code of the incorporating binary package be made
available. According to Debian Policy §7.8 [1] such a binary package
MUST list the glibc source package (and possibly others) in the
Built-Using: field.

Regards
Aurelien

[1] https://www.debian.org/doc/debian-policy/ch-relationships.html#additional-source-packages-used-to-build-the-binary-built-using


More information about the pkg-gnupg-maint mailing list