On of the fossology upstream developers pointed out that the code in ununpack/sha1.{c,h} comes from the RFC as well and doesn't have a listed license. So we need to ask the RFC upstream. There is now an upstream fossology.org bug for this
http://bugs.linux-foundation.org/show_bug.cgi?id=326 Note: ununpack also uses md5.{c,h} but that code is listed as being under the public domain, so should meet the DFSG and be GPL compatible. -- Matt Taggart tagg...@debian.org -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org