Package: libcommons-fileupload-java Version: 1.2.1-1 Severity: serious The license in the package (Apache License 1.1) doesn't match the license of the upstream release (Apache License 2.0) https://svn.apache.org/repos/asf/commons/proper/fileupload/tags/commons-fileupload-1.2.1/LICENSE.txt