ogdi-dfsg_4.0.0+ds-1~exp4_amd64.changes REJECTED

[Sebastiaan Couwenberg]

Hi Chris,

On 4/21/19 12:40 PM, Chris Lamb wrote:
>>> The RESTRICTED RIGHTS section of `License: ecshash` looks to violate
>>> DFSG clauses 5 and/or 6, if that paragraph is indeed part of the
>>> license.  (If it's just noting a legal requirement that applies to the
>>> government in all cases, the license might be DFSG-free; in that case,
>>> it shouldn't be in d/copyright.)
>>>
>>> I am not sure that the license of ogdi/c-api/ecsregex.c actually
>>> permits derivative works.
>>>
>>> The license of include/win32/rpc/auth.h, external/rpc_win32/ is not
>>> DFSG-free -- it has weird restrictions on distribution.
>>>
>>> License of d/patches/hurd not given.
>>>
>>> I did not look through all of the upstream source, given the severity
>>> of the above issues.
>>
>> Upstream has quickly acted on the license issues which should be fixed
>> in 4.1.0 where the problematic ecshash.c & ecsregex.c files are removed.
>>
>> The unused win32 files have been excluded from the repacked upstream
>> tarball.
>>
>> Can you confirm that ogdi-dfsg (4.1.0+ds-1~exp1) is good?
> 
> You would have to re-upload at this point. (Perhaps I misread 4.1.0 vs
> 4.0.0 earlier.. too many packages, alas.)

My message was sent after the upload entered NEW:

 https://ftp-master.debian.org/new/ogdi-dfsg_4.1.0+ds-1~exp1.html

Kind Regards,

Bas

-- 
 GPG Key ID: 4096R/6750F10AE88D4AF1
Fingerprint: 8182 DE41 7056 408D 6146  50D1 6750 F10A E88D 4AF1