Package: parser3-cgi
Version: 3.4.5-1
Severity: serious

parser3-cgi and libapache2-mod-parser3 combine GPL licensed files with the 
RSA-MD licensed files in src/lib/md5.
RSA-MD is incompatible with any GPL version because of its advertisement clause:

"""
License is also granted to make and use derivative works provided               
                                                     that such works are 
identified as "derived from the RSA Data                                        
                                 Security, Inc. MD5 Message-Digest Algorithm" 
in all material                                                                 
        mentioning or referencing the derived work.
"""

Also, the Apache-1.1 license used in those files is problematic with GPL.

Reply via email to