FYI, I asked the question on debian-legal (no answer yet). http://lists.debian.org/debian-legal/2012/07/msg00012.html