Package: fio Severity: grave According to debian/copyright, hash.h is licensed as GPL-2+ but this is not true. There is not any mention of license attribution in its verifiable history, not by its copyright holder or anybody else on their behalf. Thanks to Ulrich Mueller for the relevant research [0]. Similar bug is reported to package dwarves [1], which includes on older copy of this same file. Regards, Domenico [0] https://lkml.org/lkml/2019/2/11/773 [1] https://bugs.debian.org/919356 -- 3B10 0CA1 8674 ACBA B4FE FCD2 CE5B CF17 9960 DE13
Attachment:
signature.asc
Description: PGP signature