[pkg-gnupg-maint] Bug#1106800: gpgv-static: statically linked against glibc without a Built-Using: field

Aurelien Jarno aurel32 at debian.org
Fri May 30 10:59:23 BST 2025


control: tag -1 + patch

Hi,

On 2025-05-29 22:53, Aurelien Jarno wrote:
> Package: gpgv-static
> Version: 2.1.15-9
> Severity: serious
> Justification: Policy 7.8
> 
> Dear maintainer,
> 
> The gpgv-static package provides /usr/bin/gpgv-static which is
> statically linked against glibc.
> 
> glibc is mostly is mostly licensed under the LGPL, which requires that
> the full source code of the incorporating binary package be made
> available. According to Debian Policy §7.8 [1] such a binary package
> MUST list the glibc source package (and possibly others) in the
> Built-Using: field.

Please find attached a patch to fix that.

Regards
Aurelien

-- 
Aurelien Jarno                          GPG: 4096R/1DDD8C9B
aurelien at aurel32.net                     http://aurel32.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: gnupg2.built-using.patch
Type: text/x-diff
Size: 571 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnupg-maint/attachments/20250530/d18844da/attachment-0001.patch>


More information about the pkg-gnupg-maint mailing list