I cannot find the license claim mentioned. In the source for krb5 1.13.2+dfsg-5, I see src/ccapi/common/win/OldCC/autolock.hxx but it appears to have a regular MIT-style license boilerplate. It has sha256sum 02d63ce54f142101910143464f9eea3935f7d478e4e32998f5ba02cf8ffddc61. I also grepped for Aladdin (case insenstive) and nothing came up. Are you sure you don't have some local filesystem corruption or something like that? Can you confirm with "pull-lp-source" on a different system that you can pull the source file with the license you found, and provide the top line of the debian/changelog file in that source tree?
Marking Incomplete as I cannot find any evidence of a license problem in the source itself. ** Changed in: krb5 (Ubuntu) Status: Confirmed => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1644595 Title: krb5-1.13.2+dfsg-5 source contains source subject to the aladdin license To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/1644595/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs