[pkg-gnupg-maint] Bug#1106800: gpgv-static: statically linked against glibc without a Built-Using: field
Aurelien Jarno
aurel32 at debian.org
Fri May 30 10:59:23 BST 2025
control: tag -1 + patch
Hi,
On 2025-05-29 22:53, Aurelien Jarno wrote:
> Package: gpgv-static
> Version: 2.1.15-9
> Severity: serious
> Justification: Policy 7.8
>
> Dear maintainer,
>
> The gpgv-static package provides /usr/bin/gpgv-static which is
> statically linked against glibc.
>
> glibc is mostly is mostly licensed under the LGPL, which requires that
> the full source code of the incorporating binary package be made
> available. According to Debian Policy §7.8 [1] such a binary package
> MUST list the glibc source package (and possibly others) in the
> Built-Using: field.
Please find attached a patch to fix that.
Regards
Aurelien
--
Aurelien Jarno GPG: 4096R/1DDD8C9B
aurelien at aurel32.net http://aurel32.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: gnupg2.built-using.patch
Type: text/x-diff
Size: 571 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnupg-maint/attachments/20250530/d18844da/attachment-0001.patch>
More information about the pkg-gnupg-maint
mailing list