Source: psi-plus Severity: serious Justification: Policy 2.2.1, Policy 12.5
There are many files which are LGPL-2.1+ and many files which are GPL2+, your debian/copyight is not accurate about this saying only that the software is LGPL-2+ and pointing to GPL instead of the LGPL -- I noticed that many of the icons in in the iconsets-psi-plus directory appear to be taken from non-free from various websites. For example, the icondef.xml file inside iconsets-psi-plus/affiliations/vista-halloween-affiliations.jisp reads: Based on Vista halloween Icons by Icons Land. This appears to be http://icons-land.com/vista-style-halloween-pumpkin-emoticons.php The icons look to be identical copies which have been resized. Other icon sets appear to be creative commons licensed, for example, smileys-affiliations/icondef.xml refers to http://p.yusukekamiyamane.com/ as the source, and this site is claiming the icons to be under creative commons which is not mentioned in debian/copyright I worry about the lack of a license for the icons which just claim to have been found on iconfinder.com, as that site constains many non-free icons. iconsets-psi-plus/emoticons/Android.jisp contains icons from the android project which is apache licensed, but this license isn't mentioned in debian/copyright iconsets-psi-plus/emoticons/kolobok* is non-free. There is a copyright file inside the .jisp files which is clearly non-free, and is also not included in debian/copyright At this point I stopped looking at licenses of the iconsets. It is quite clear that many of them are taking from non-free sources. Some might be redistributable and free, but with licenses not mentioned in debian/copyright. --- iris/src/jdns is MIT licensed, but this isn't mentioned in debian/copyright --- src/tools/crash/crash_sigsev* contains a license not mentioned in debian/copyright --- third-party/qca/qca/src/botantools contains multiple licenses not mentioned in debian/copyright --- I stop at this point. I didn't fully audit the source code, but it is clearly needed. -- System Information: Debian Release: 6.0 APT prefers unstable APT policy: (600, 'unstable'), (500, 'testing'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org