Severity: serious
On Sat, 2 Jan 2021 18:48:19 +0100 Bastian Germann <bastiangerm...@fishpost.de>
wrote:
Package: maxima
Severity: important
This package depends on libreadline8 which is GPL-3+ licensed. According
to debian/copyright parts of your package are GPL-2-only licensed. If
that is also (transitively) the case for the binaries that link with
libreadline.so.8 it might be legally problematic (see
https://www.gnu.org/licenses/gpl-faq.html#AllCompatibility).
There is an easy solution to the problem: Replacing the build dependency
libreadline-dev with libreadline-gplv2-dev links with the GPL-2+
licensed older version. However, that is orphaned in Debian, so
libeditreadline-dev should be preferred, which does not compile with
your package without any patch. It links with the BSD-licensed libedit
library which is a readline replacement.
Raising severity because this is a Policy violation.
