DFSG NEW Queue

DFSG, Licensing & New Packages Team

Review: duckdb 1.5.1-1

New Package Report

.changes
Version1.5.1-1
Changed-ByDominique Belhachemi
Architecturesource amd64
Distributionunstable
DateTue, 24 Mar 2026 00:36:41 -0400
Sourceduckdb
Changelog
duckdb (1.5.1-1) unstable; urgency=medium
 .
   * Initial release. (Closes: #1036922)
.dsc
Package-Listduckdb deb database optional arch=any
libduckdb-dev deb libdevel optional arch=any
libduckdb1.5 deb libs optional arch=any
Sectiondatabase
Priorityoptional
Componentmain
debian/copyright
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Source: https://github.com/duckdb/duckdb
Upstream-Name: duckdb
Upstream-Contact:
 https://github.com/duckdb/duckdb,

Files: *
Copyright: 2018-2025 Stichting DuckDB Foundation
License: Expat

Files: debian/*
Copyright: 2026 Dominique Belhachemi <domibel@debian.org>
License: Expat

Files: third_party/brotli/*
Copyright: 2009-2016 The Brotli Authors
License: Expat

Files: third_party/catch/*
Copyright: 2021 Two Blue Cubes Ltd
License: BSL-1.0

Files: third_party/concurrentqueue/*
Copyright: 2013-2016 Cameron Desrochers
License: BSD-2-Clause or BSL-1.0

Files: third_party/fast_float/*
Copyright: 2021 Daniel Lemire, João Paulo Magalhaes
License: Expat or Apache-2.0

Files: third_party/fastpforlib/*
Copyright: 2013-2014 Daniel Lemire
License: Apache-2.0

Files: third_party/fmt/*
Copyright: 2012-present Victor Zverovich
License: Expat

Files: third_party/fsst/*
Copyright: 2018-2020 CWI, TU Munich, FSU Jena
License: Expat

Files: third_party/httplib/*
Copyright: 2017 yhirose
License: Expat

Files: third_party/hyperloglog/*
Copyright: 2012 Artsyinc, Inc.
License: Expat

Files: third_party/jaro_winkler/*
Copyright: 2022 Max Bachmann
License: Expat

Files: third_party/libpg_query/*
Copyright: 2015 Lukas Fittl <lukas@fittl.com>
 1996-2018 PostgreSQL Global Development Group
 1994 Regents of the University of California
License: BSD-3-Clause

Files: third_party/libpg_query/include/parser/gram.hpp
Copyright: 1984-2006 Free Software Foundation, Inc.
License: GPL-2+
Comment: Bison-generated parser skeleton. Under the Bison special exception,
 this file may be used in parser output under any license chosen by the
 parser's author, regardless of the GPL on the skeleton itself.

Files: third_party/lz4/*
Copyright: 2011-2020 Yann Collet
License: BSD-2-Clause

Files: third_party/mbedtls/*
Copyright: The Mbed TLS Contributors
License: Apache-2.0 or GPL-2+
Comment: Dual-licensed; users may choose either license.

Files: third_party/miniz/*
Copyright: 2010-2014 RAD Game Tools, Valve Software, Rich Geldreich, Tenacious Software LLC
License: Expat

Files: third_party/parquet/*
Copyright: 2012-2014 The Apache Software Foundation
License: Apache-2.0

Files: third_party/pcg/*
Copyright: 2014-2017 Melissa O'Neill, PCG Project contributors
License: Expat

Files: third_party/pdqsort/*
Copyright: 2021 Orson Peters
License: Zlib

Files: third_party/re2/*
Copyright: 2009 The RE2 Authors
License: BSD-3-Clause

Files: third_party/ska_sort/*
Copyright: 2016 Malte Skarupke
License: BSL-1.0

Files: third_party/skiplist/*
Copyright: 2017-2023 Paul Ross
License: Expat

Files: third_party/snappy/*
Copyright: 2011 Google Inc.
License: BSD-3-Clause

Files: third_party/snowball/*
Copyright: 2001-2019 Martin Porter, Richard Boulton, Yoshiki Shibukawa, Olly Betts
License: BSD-3-Clause

Files: third_party/tdigest/*
Copyright: Ted Dunning
License: Apache-2.0

Files: third_party/thrift/*
Copyright: The Apache Software Foundation
License: Apache-2.0

Files: third_party/utf8proc/*
Copyright: 2009-2019 Steven G. Johnson, Jiahao Chen, Tony Kelman, Jonas Fonseca, Public Software Group e.V.
License: Expat

Files: third_party/vergesort/*
Copyright: 2015 Morwenn
License: Expat

Files: third_party/yyjson/*
Copyright: 2020 YaoYuan
License: Expat

Files: third_party/zstd/*
Copyright: 2016-present Facebook, Inc.
 2011-2020 Yann Collet
 2016 Tino Reichardt
License: BSD-3-Clause

Files: extension/icu/third_party/icu/*
Copyright: 1991-2020 Unicode, Inc.
License: ICU

Files: extension/jemalloc/jemalloc/*
Copyright: 2002-present Jason Evans <jasone@canonware.com>
 2007-2012 Mozilla Foundation
 2009-present Facebook, Inc.
License: BSD-2-Clause

License: Apache-2.0
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
 .
 On Debian systems, the full text of the Apache License, Version 2.0
 can be found in the file /usr/share/common-licenses/Apache-2.0.

License: BSD-2-Clause
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions are met:
 .
 1. Redistributions of source code must retain the above copyright notice,
    this list of conditions and the following disclaimer.
 2. Redistributions in binary form must reproduce the above copyright notice,
    this list of conditions and the following disclaimer in the documentation
    and/or other materials provided with the distribution.
 .
 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
 AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
 LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 POSSIBILITY OF SUCH DAMAGE.

License: BSD-3-Clause
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions are met:
 .
 1. Redistributions of source code must retain the above copyright notice,
    this list of conditions and the following disclaimer.
 2. Redistributions in binary form must reproduce the above copyright notice,
    this list of conditions and the following disclaimer in the documentation
    and/or other materials provided with the distribution.
 3. Neither the name of the copyright holder nor the names of its contributors
    may be used to endorse or promote products derived from this software
    without specific prior written permission.
 .
 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
 AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
 LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 POSSIBILITY OF SUCH DAMAGE.

License: BSL-1.0
 Boost Software License - Version 1.0 - August 17th, 2003
 .
 Permission is hereby granted, free of charge, to any person or organization
 obtaining a copy of the software and accompanying documentation covered by
 this license (the "Software") to use, reproduce, display, distribute,
 execute, and transmit the Software, and to prepare derivative works of the
 Software, and to permit third-parties to whom the Software is furnished to
 do so, all subject to the following:
 .
 The copyright notices in the Software and this entire statement, including
 the above license grant, this restriction and the following disclaimer,
 must be included in all copies of the Software, in whole or in part, and
 all derivative works of the Software, unless such copies or derivative
 works are solely in the form of machine-executable object code generated
 by a source language processor.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT. IN NO EVENT
 SHALL THE COPYRIGHT HOLDERS OR ANYONE DISTRIBUTING THE SOFTWARE BE LIABLE
 FOR ANY DAMAGES OR OTHER LIABILITY, WHETHER IN CONTRACT, TORT OR OTHERWISE,
 ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
 DEALINGS IN THE SOFTWARE.

License: Expat
 Permission is hereby granted, free of charge, to any person obtaining a
 copy of this software and associated documentation files (the "Software"),
 to deal in the Software without restriction, including without limitation
 the rights to use, copy, modify, merge, publish, distribute, sublicense,
 and/or sell copies of the Software, and to permit persons to whom the
 Software is furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included
 in all copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
 OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
 MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
 IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
 CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
 TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
 SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

License: GPL-2+
 On Debian systems, the full text of the GNU General Public License
 version 2 can be found in the file /usr/share/common-licenses/GPL-2.

License: ICU
 COPYRIGHT AND PERMISSION NOTICE (ICU 58 and later)
 .
 Copyright © 1991-2020 Unicode, Inc. All rights reserved.
 Distributed under the Terms of Use in https://www.unicode.org/copyright.html.
 .
 Permission is hereby granted, free of charge, to any person obtaining
 a copy of the Unicode data files and any associated documentation
 (the "Data Files") or Unicode software and any associated documentation
 (the "Software") to deal in the Data Files or Software without restriction,
 including without limitation the rights to use, copy, modify, merge,
 publish, distribute, and/or sell copies of the Data Files or Software, and
 to permit persons to whom the Data Files or Software are furnished to do so,
 provided that either (a) this copyright and permission notice appear with all
 copies of the Data Files or Software, or (b) this copyright and permission
 notice appear in associated Documentation.
 .
 THE DATA FILES AND SOFTWARE ARE PROVIDED "AS IS", WITHOUT WARRANTY OF ANY
 KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
 MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF
 THIRD PARTY RIGHTS.

License: Zlib
 This software is provided 'as-is', without any express or implied warranty.
 In no event will the authors be held liable for any damages arising from the
 use of this software.
 .
 Permission is granted to anyone to use this software for any purpose,
 including commercial applications, and to alter it and redistribute it
 freely, subject to the following restrictions:
 .
 1. The origin of this software must not be misrepresented; you must not
    claim that you wrote the original software. If you use this software in
    a product, an acknowledgment in the product documentation would be
    appreciated but is not required.
 2. Altered source versions must be plainly marked as such, and must not be
    misrepresented as being the original software.
 3. This notice may not be removed or altered from any source distribution.

Review Information

rejected — allocated to awm 19 days ago, started 19 days ago, completed 18 days ago.

Final Comment

Hi,

Lintian seems to think thuis is built with statically linked libzstd. In
Debian it's much more the practice to depend on the library loading
system.

See the full note from Lintian to this effect.

Thanks,
Andrew McMillan

Other Reviews of this Package

VersionHashAllocatedCompletedReviewerStatusDetails
1.5.1-2 ba0476a8… 2026-03-28 05:30 2026-03-29 06:29 awm accepted VIEW

Public Notes

19 days ago ● public

Search for authors

Command: ag -i 'copyright .* (by|rights|reserved)[. ]' | sed -e 's/^.*Copyright //i' -e 's/\(20\|19\)[0-9][0-9][, -]*//g' -e 's/[., ]*ALL RIGHTS RESERVED.*$//i' | sort -i | uniq -i
Exit code: 0

(c) by Lucent Technologies.
(c) by the Brotli Authors.
(C) IBM and others
(c) IBM Corporation
(C) International Business Machines Corporation and others
(C) Mozilla Foundation
&copy; by Steven G. Johnson, Jiahao Chen, Tony Kelman, Jonas Fonseca, and other contributors listed in the git history.*
(c) Paul Ross
(c) present, Facebook, Inc
(C) present Facebook, Inc
(c) The RE2 Authors
(c) Two Blue Cubes Ltd
(c) Unicode, Inc
(c) Yuji Hirose
(c) Yuta Mori
Google Inc
owned by the Transaction Processing Performance Council.
owner or by an individual or Legal Entity authorized to submit
owner or entity authorized by the copyright
The RE2 Authors
the V8 project authors
Two Blue Cubes Ltd
© Unicode, Inc
19 days ago ● public

Lintian

Command: lintian -Iiv -L '>=warning' --show-overrides --color=never ../$(basename $PWD)_*.changes
Exit code: 0

N:
W: duckdb: no-manual-page [usr/bin/duckdb]
N: 
N:   Each binary in /usr/bin, /usr/sbin, /bin, /sbin or /usr/games should have
N:   a manual page
N:   
N:   Note that though the man program has the capability to check for several
N:   program names in the NAMES section, each of these programs should have its
N:   own manual page (a symbolic link to the appropriate manual page is
N:   sufficient) because other manual page viewers such as xman or tkman don't
N:   support this.
N:   
N:   If the name of the manual page differs from the binary by case, man may be
N:   able to find it anyway; however, it is still best practice to match the
N:   exact capitalization of the executable in the manual page.
N:   
N:   If the manual pages are provided by another package on which this package
N:   depends, Lintian may not be able to determine that manual pages are
N:   available. In this case, after confirming that all binaries do have manual
N:   pages after this package and its dependencies are installed, please add a
N:   Lintian override.
N: 
N:   Please refer to Manual pages (Section 12.1) in the Debian Policy Manual
N:   for details.
N: 
N:   Visibility: warning
N:   Show-Always: no
N:   Check: documentation/manual
N:   Renamed from: binary-without-manpage
N: 
N:
N: DuckDB bundles zstd along with all other third-party libraries and
N: extensions statically into libduckdb.so.
O: libduckdb1.5: embedded-library libzstd [usr/lib/x86_64-linux-gnu/libduckdb.so.1.5.1]
N: 
N:   The given ELF object appears to have been statically linked to a library.
N:   Doing this is strongly discouraged due to the extra work needed by the
N:   security team to fix all the extra embedded copies or trigger the package
N:   rebuilds, as appropriate.
N:   
N:   If the package uses a modified version of the given library it is highly
N:   recommended to coordinate with the library's maintainer to include the
N:   changes on the system version of the library.
N: 
N:   Please refer to Embedded code copies (Section 4.13) in the Debian Policy
N:   Manual for details.
N: 
N:   Visibility: error
N:   Show-Always: no
N:   Check: libraries/embedded
N: 
19 days ago ● public

Licenserecon

Command: lrc -s
Exit code: 3

en: Versions: licenserecon '12.0'  licensecheck '3.3.9-1'

Parsing Source Tree  ....
Reading d/copyright  ....
Running licensecheck ....

d/copyright      | licensecheck

Expat            | Apache-2.0        data/geoparquet/LICENSE
ICU              | BSD-3-clause      extension/icu/third_party/icu/i18n/double-conversion-bignum.cpp
ICU              | Unicode-DFS-2016  extension/icu/third_party/icu/LICENSE
BSD-2-Clause     | public-domain     extension/jemalloc/jemalloc/include/jemalloc/internal/hash.h
Expat            | Apache-2.0        scripts/clang-tidy-diff.py
Expat            | public-domain     src/common/crypto/md5.cpp
Expat            | Apache-2.0        src/include/duckdb/common/adbc/adbc.h
BSD-2-Clause or BSL-1.0| BSD-2-clause      third_party/concurrentqueue/concurrentqueue.h
BSD-2-Clause or BSL-1.0| BSD-2-clause and/or BSL-1.0 third_party/concurrentqueue/LICENSE
Expat or Apache-2.0| Expat             third_party/fast_float/fast_float/fast_float.h
Expat            | BSD-3-clause      third_party/hyperloglog/hyperloglog.cpp
GPL-2+           | GPL-2+ with Bison-2.2 exception third_party/libpg_query/include/parser/gram.hpp
BSD-3-Clause     | GPL-2+ with Bison-2.2 exception third_party/libpg_query/src_backend_parser_gram.cpp
Apache-2.0 or GPL-2+| Apache-2.0        third_party/mbedtls/include/mbedtls/aes.h
Expat            | Apache-2.0        third_party/pcg/pcg_extras.hpp
BSD-3-Clause     | BSD-3-clause and/or CC-BY-3.0 and/or Expat third_party/snappy/LICENSE
Expat            | Zlib              third_party/vergesort/detail/insertion_sort.h
BSD-3-Clause     | Expat             third_party/zstd/dict/divsufsort.cpp
Expat            | BSD-2-clause      tools/shell/linenoise/include/linenoise.h
Expat            | Apache-2.0        tools/swift/duckdb-swift/Sources/DuckDB/Types/IntHuge.swift

Short option in use. Not all differences shown

Back to Dashboard | View all reviews for this package