[pkg-boost-devel] Bug#788126: libboost1.55-dev: Contains files with missing or questionable licenses

[Reimar Döffinger]

Package: libboost1.55-dev
Version: 1.55.0+dfsg-3
Severity: serious
Justification: Policy 2.3

Dear Maintainer,

Several files in this package do not seem to be covered by any
license described in the copyright file.
Most serious:
interprocess/sync/xsi/advanced_xsi_semaphore.hpp : No license mentioned at all
python/detail/python22_fixed.h : Explicitly "All rights reserved"

Probably fine but questionable and IMHO should be documented at least
as they will fail in automated checks:
algorithm/cxx14/mismatch.hpp : Refers to non-existing LICENSE10.txt, probably typo
And some non-standard license headers in:
rational.hpp
math/common_factor_rt.hpp
test/utils/runtime/cla/detail/argument_value_usage.hpp
shared_container_iterator.hpp
program_options/detail/utf8_codecvt_facet.hpp

Aside:
The latter files contain in some cases boostinspect:nolicense, indicating
that someone at some point tried to avoid this license mess, however
that activity seems to have died...
Given the popularity of the library and the regularity of license
slip-ups a more long-term solution than manual review/fixing would
be nice to have.
And apologies if "Severity: serious" was the incorrect choice.

Thanks,
Reimar Döffinger

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (700, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386, armhf, armel, ppc64el

Kernel: Linux 4.0.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages libboost1.55-dev depends on:
ii  libstdc++-4.9-dev [libstdc++-dev]  4.9.2-18
ii  libstdc++-5-dev [libstdc++-dev]    5.1.1-9

libboost1.55-dev recommends no packages.

Versions of packages libboost1.55-dev suggests:
pn  libboost-atomic1.55-dev           <none>
pn  libboost-chrono1.55-dev           <none>
pn  libboost-context1.55-dev          <none>
pn  libboost-coroutine1.55-dev        <none>
pn  libboost-date-time1.55-dev        <none>
pn  libboost-exception1.55-dev        <none>
pn  libboost-filesystem1.55-dev       <none>
pn  libboost-graph-parallel1.55-dev   <none>
pn  libboost-graph1.55-dev            <none>
pn  libboost-iostreams1.55-dev        <none>
pn  libboost-locale1.55-dev           <none>
pn  libboost-log1.55-dev              <none>
pn  libboost-math1.55-dev             <none>
pn  libboost-mpi-python1.55-dev       <none>
pn  libboost-mpi1.55-dev              <none>
pn  libboost-program-options1.55-dev  <none>
pn  libboost-python1.55-dev           <none>
pn  libboost-random1.55-dev           <none>
pn  libboost-regex1.55-dev            <none>
pn  libboost-serialization1.55-dev    <none>
pn  libboost-signals1.55-dev          <none>
pn  libboost-system1.55-dev           <none>
pn  libboost-test1.55-dev             <none>
pn  libboost-thread1.55-dev           <none>
pn  libboost-timer1.55-dev            <none>
pn  libboost-wave1.55-dev             <none>
pn  libboost1.55-doc                  <none>
pn  libboost1.55-tools-dev            <none>
pn  libmpfrc++-dev                    <none>
pn  libntl-dev                        <none>

-- no debconf information