ogdi-dfsg_4.0.0+ds-1~exp4_amd64.changes REJECTED

[Chris Lamb]

Hi Sebastiaan,

> > The RESTRICTED RIGHTS section of `License: ecshash` looks to violate
> > DFSG clauses 5 and/or 6, if that paragraph is indeed part of the
> > license.  (If it's just noting a legal requirement that applies to the
> > government in all cases, the license might be DFSG-free; in that case,
> > it shouldn't be in d/copyright.)
> > 
> > I am not sure that the license of ogdi/c-api/ecsregex.c actually
> > permits derivative works.
> > 
> > The license of include/win32/rpc/auth.h, external/rpc_win32/ is not
> > DFSG-free -- it has weird restrictions on distribution.
> > 
> > License of d/patches/hurd not given.
> > 
> > I did not look through all of the upstream source, given the severity
> > of the above issues.
>
> Upstream has quickly acted on the license issues which should be fixed
> in 4.1.0 where the problematic ecshash.c & ecsregex.c files are removed.
> 
> The unused win32 files have been excluded from the repacked upstream
> tarball.
> 
> Can you confirm that ogdi-dfsg (4.1.0+ds-1~exp1) is good?

You would have to re-upload at this point. (Perhaps I misread 4.1.0 vs
4.0.0 earlier.. too many packages, alas.)


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org 🍥 chris-lamb.co.uk
       `-