ogdi-dfsg_4.0.0+ds-1~exp4_amd64.changes REJECTED

[Sebastiaan Couwenberg]

Hi Chris and anonymous trainee,

Thanks for the review.

On 4/20/19 11:00 AM, Chris Lamb wrote:
> The following note was added by an ftpmaster-in-training. It will appear to be
> "From" me as I am the one actioning it.
> 
> (snip)
> 
> REJECT
> 
> [This note DOES apply to the ~exp2 upload!]
> 
> The RESTRICTED RIGHTS section of `License: ecshash` looks to violate
> DFSG clauses 5 and/or 6, if that paragraph is indeed part of the
> license.  (If it's just noting a legal requirement that applies to the
> government in all cases, the license might be DFSG-free; in that case,
> it shouldn't be in d/copyright.)
> 
> I am not sure that the license of ogdi/c-api/ecsregex.c actually
> permits derivative works.
> 
> The license of include/win32/rpc/auth.h, external/rpc_win32/ is not
> DFSG-free -- it has weird restrictions on distribution.
> 
> License of d/patches/hurd not given.
> 
> I did not look through all of the upstream source, given the severity
> of the above issues.
Upstream has quickly acted on the license issues which should be fixed
in 4.1.0 where the problematic ecshash.c & ecsregex.c files are removed.

The unused win32 files have been excluded from the repacked upstream
tarball.

Can you confirm that ogdi-dfsg (4.1.0+ds-1~exp1) is good?

Kind Regards,

Bas

-- 
 GPG Key ID: 4096R/6750F10AE88D4AF1
Fingerprint: 8182 DE41 7056 408D 6146  50D1 6750 F10A E88D 4AF1