DFSG, Licensing & New Packages Team

linux (6.12.86-1) trixie-security; urgency=high
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.86
     - ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES
     - ALSA: usb-audio: Avoid false E-MU sample-rate notifications
     - ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch
     - usb: xhci: Make usb_host_endpoint.hcpriv survive endpoint_disable()
     - usb: chipidea: otg: not wait vbus drop if use role_switch
     - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change
     - ALSA: usb-audio: Evaluate packsize caps at the right place
     - LoongArch: Add spectre boundry for syscall dispatch table
     - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check
     - leds: qcom-lpg: Check for array overflow when selecting the high
       resolution
     - greybus: gb-beagleplay: bound bootloader receive buffering
     - greybus: gb-beagleplay: fix sleep in atomic context in hdlc_tx_frames()
     - misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt()
     - ibmasm: fix OOB reads in command_file_write due to missing size checks
     - ibmasm: fix heap over-read in ibmasm_send_i2o_message()
     - driver core: Don't let a device probe until it's ready
     - drm/nouveau: fix nvkm_device leak on aperture removal failure
     - kbuild: rust: allow `clippy::uninlined_format_args`
     - firmware: google: framebuffer: Do not mark framebuffer as busy
     - arm64/mm: Enable batched TLB flush in unmap_hotplug_range()
     - padata: Fix pd UAF once and for all (CVE-2025-38584)
     - padata: Remove comment for reorder_work
     - rust: init: fix `clippy::undocumented_unsafe_blocks` warnings
     - drm/amdgpu: Use vmemdup_array_user in amdgpu_bo_create_list_entry_array
     - drm/amdgpu: Limit BO list entry count to prevent resource exhaustion
       (CVE-2026-23468)
     - device property: Make modifications of fwnode "flags" thread safe
     - ocfs2: split transactions in dio completion to avoid credit exhaustion
     - zram: do not forget to endio for partial discard requests
     - wifi: rtw88: check for PCI upstream bridge existence
     - vfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex
     - vfio/cdx: Fix NULL pointer dereference in interrupt trigger path
     - um: drivers: call kernel_strrchr() explicitly in cow_user.c
     - spi: imx: fix use-after-free on unbind
     - spi: ch341: fix memory leaks on probe failures
     - mm/memory_hotplug: fix hwpoisoned large folio handling in
       do_migrate_range()
     - crypto: pcrypt - Fix handling of MAY_BACKLOG requests
     - of: unittest: fix use-after-free in of_unittest_changeset()
     - of: unittest: fix use-after-free in testdrv_probe()
     - hwmon: (powerz) Fix missing usb_kill_urb() on signal interrupt
     - media: amphion: Fix race between m2m job_abort and device_run
     - ALSA: control: Validate buf_len before strnlen() in
       snd_ctl_elem_init_enum_names()
     - net: caif: clear client service pointer on teardown
     - net: strparser: fix skb_head leak in strp_abort_strp()
     - media: mtk-jpeg: fix use-after-free in release path due to uncancelled
       work
     - crypto: atmel-sha204a - Fix OTP sysfs read and error handling
     - PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown
     - Revert "ALSA: usb: Increase volume range that triggers a warning"
     - PCI: epf-mhi: Return 0, not remaining timeout, when eDMA ops complete
     - lib/ts_kmp: fix integer overflow in pattern length calculation
     - media: i2c: imx219: Check return value of devm_gpiod_get_optional() in
       imx219_probe()
     - net: qrtr: ns: Fix use-after-free in driver remove()
     - ext2: reject inodes with zero i_nlink and valid mode in ext2_iget()
     - ALSA: aoa: i2sbus: fix OF node lifetime handling
     - ALSA: ctxfi: Add fallback to default RSR for S/PDIF
     - ALSA: seq_oss: return full count for successful SEQ_FULLSIZE writes
     - erofs: fix the out-of-bounds nameoff handling for trailing dirents
     - jbd2: fix deadlock in jbd2_journal_cancel_revoke()
     - md/raid10: fix deadlock with check operation and nowait requests
     - mfd: stpmic1: Attempt system shutdown twice in case PMIC is confused
     - mtd: docg3: fix use-after-free in docg3_release()
     - nvme-pci: add NVME_QUIRK_DISABLE_WRITE_ZEROES for Kingston OM3SGP4
     - nvme: respect NVME_QUIRK_DISABLE_WRITE_ZEROES when wzsl is set
     - parisc: _llseek syscall is only available for 32-bit userspace
     - remoteproc: xlnx: Only access buffer information if IPI is buffered
     - sched: Use u64 for bandwidth ratio calculations
     - rbd: fix null-ptr-deref when device_add_disk() fails
     - block: fix zone write plugs refcount handling in
       disk_zone_wplug_schedule_bio_work()
     - io_uring/timeout: check unused sqe fields
     - iio: adc: ti-ads7950: use iio_push_to_buffers_with_ts_unaligned()
     - io_uring/poll: fix signed comparison in io_poll_get_ownership()
     - io_uring/poll: ensure EPOLL_ONESHOT is propagated for EPOLL_URING_WAKE
     - ALSA: core: Fix potential data race at fasync handling
     - ALSA: caiaq: Fix control_put() result and cache rollback
     - ALSA: caiaq: Handle probe errors properly
     - ALSA: 6fire: Fix input volume change detection
     - ALSA: pcmtest: fix reference leak on failed device registration
     - ALSA: pcmtest: Fix resource leaks in module init error paths
     - iio: adc: ad7768-1: fix one-shot mode data acquisition
     - rxrpc: Fix memory leaks in rxkad_verify_response()
     - rxrpc: Fix rxkad crypto unalignment handling
     - rxrpc: Fix re-decryption of RESPONSE packets
     - tools/accounting: handle truncated taskstats netlink messages
     - arm64: dts: marvell: uDPU: add ethernet aliases
     - net: qrtr: ns: Free the node during ctrl_cmd_bye()
     - net: rds: fix MR cleanup on copy error
     - net: txgbe: fix firmware version check
     - net/smc: avoid early lgr access in smc_clc_wait_msg
     - net: ks8851: Reinstate disabling of BHs around IRQ handler
     - netconsole: avoid out-of-bounds access on empty string in trim_newline()
     - net: ks8851: Avoid excess softirq scheduling
     - drm/arcpgu: fix device node leak
     - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv
     - ipv4: icmp: validate reply type before using icmp_pointers
     - libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()
     - extract-cert: Wrap key_pass with '#ifdef USE_PKCS11_ENGINE'
     - tpm: avoid -Wunused-but-set-variable
     - LoongArch: Show CPU vulnerabilites correctly
     - power: supply: axp288_charger: Do not cancel work before initializing it
     - hwmon: (pt5161l) Fix bugs in pt5161l_read_block_data()
     - randomize_kstack: Maintain kstack_offset per task
     - mmc: block: use single block write in retry
     - mmc: sdhci-of-dwcmshc: Disable clock before DLL configuration
     - arm64: dts: ti: am62-verdin: Enable pullup for eMMC data pins
     - xfs: fix a resource leak in xfs_alloc_buftarg()
     - firmware: google: framebuffer: Do not unregister platform device
     - crypto: talitos - fix SEC1 32k ahash request limitation
     - crypto: talitos - rename first/last to first_desc/last_desc
     - pwm: imx-tpm: Count the number of enabled channels in probe
     - tpm: Fix auth session leak in tpm2_get_random() error path
     - tpm: Use kfree_sensitive() to free auth session in tpm_dev_release()
     - tpm: tpm_tis: add error logging for data transfer
     - tpm: tpm_tis: stop transmit if retries are exhausted
     - rtc: ntxec: fix OF node reference imbalance
     - mm/damon/core: use time_in_range_open() for damos quota window start
     - userfaultfd: allow registration of ranges below mmap_min_addr
     - KVM: x86: Defer non-architectural deliver of exception payload to
       userspace read
     - KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state
     - KVM: nSVM: Sync NextRIP to cached vmcb12 after VMRUN of L2
     - KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2
     - KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0
     - KVM: SVM: Explicitly mark vmcb01 dirty after modifying VMCB intercepts
     - KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to guest mode
     - KVM: nSVM: Use vcpu->arch.cr2 when updating vmcb12 on nested #VMEXIT
     - KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on nested VMRUN
     - KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID)
     - KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT
     - KVM: nSVM: Clear tracking of L1->L2 NMI and soft IRQ on nested #VMEXIT
     - KVM: nSVM: Add missing consistency check for EFER, CR0, CR4, and CS
     - KVM: nSVM: Add missing consistency check for nCR3 validity
     - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1
     - KVM: nSVM: Always intercept VMMCALL when L2 is active
     - io_uring/poll: fix multishot recv missing EOF on wakeup race
     - perf annotate: Use jump__delete when freeing LoongArch jumps
     - ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access
     - ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()
     - mtd: spi-nor: sst: Fix write enable before AAI sequence
     - amdgpu/jpeg: fix deepsleep register for jpeg 5_0_0 and 5_0_2
     - md/raid5: fix soft lockup in retry_aligned_read()
     - md/raid5: validate payload size before accessing journal metadata
     - check-uapi: link into shared objects
     - HID: apple: ensure the keyboard backlight is off if suspending
     - inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails
     - x86/cpu: Disable FRED when PTI is forced on
     - wifi: rtl8xxxu: fix potential use of uninitialized value
     - tcp: call sk_data_ready() after listener migration
     - taskstats: set version in TGID exit notifications
     - mfd: core: Preserve OF node when ACPI handle is present
     - apparmor: use target task's context in apparmor_getprocattr()
     - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers
     - bus: mhi: host: pci_generic: Switch to async power up to avoid boot delays
     - can: ucan: fix devres lifetime
     - crypto: arm64/aes - Fix 32-bit aes_mac_update() arg treated as 64-bit
     - crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup
     - crypto: atmel-ecc - Release client on allocation failure
     - crypto: hisilicon - Fix dma_unmap_single() direction
     - crypto: ccree - fix a memory leak in cc_mac_digest()
     - crypto: atmel-tdes - fix DMA sync direction
     - crypto: atmel-sha204a - Fix error codes in OTP reads
     - crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path
     - crypto: atmel-sha204a - Fix uninitialized data access on OTP read error
     - crypto: nx - Fix packed layout in struct nx842_crypto_header
     - dm mirror: fix integer overflow in create_dirty_log()
     - ceph: only d_add() negative dentries when they are unhashed
     - IB/core: Fix zero dmac race in neighbor resolution
     - ktest: Fix the month in the name of the failure directory
     - ntfs3: add buffer boundary checks to run_unpack()
     - ntfs3: fix integer overflow in run_unpack() volume boundary check
     - rtmutex: Use waiter::task instead of current in remove_waiter()
     - scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails
     - seg6: fix seg6 lwtunnel output redirect for L2 reduced encap mode
     - smb: client: validate the whole DACL before rewriting it in cifsacl
       (CVE-2026-31709)
     - f2fs: fix UAF caused by decrementing sbi->nr_pages[] in
       f2fs_write_end_io() (CVE-2026-31715)
     - lib: test_hmm: evict device pages on file close to avoid use-after-free
     - f2fs: fix to do sanity check on dcc->discard_cmd_cnt conditionally
     - ksmbd: use msleep instaed of schedule_timeout_interruptible()
     - ksmbd: replace connection list with hash table
     - ksmbd: reset rcount per connection in ksmbd_conn_wait_idle_sess_id()
     - thermal: core: Fix thermal zone governor cleanup issues
     - wifi: mt76: mt792x: describe USB WFSYS reset with a descriptor
     - wifi: mt76: mt792x: fix mt7925u USB WFSYS reset handling
     - wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup()
     - mm/migrate: factor out movable_ops page handling into
       migrate_movable_ops_page()
     - mm/migrate: move movable_ops page handling out of move_to_new_folio()
     - mm: migrate: requeue destination folio on deferred split queue
     - ALSA: aoa: Use guard() for mutex locks
     - ALSA: aoa: i2sbus: clear stale prepared state
     - mm/zsmalloc: copy KMSAN metadata in zs_page_migrate()
     - media: rc: ttusbir: respect DMA coherency rules
     - ALSA: aoa: Skip devices with no codecs in i2sbus_resume()
     - media: rc: igorplugusb: heed coherency rules
     - RDMA/mana_ib: Disable RX steering on RSS QP destroy
     - block: relax pgmap check in bio_add_page for compatible zone device pages
     - iio: frequency: admv1013: add dev variable
     - iio: frequency: admv1013: fix NULL pointer dereference on str
     - rxrpc: Fix potential UAF after skb_unshare() failure
     - net: qrtr: ns: Limit the maximum server registration per node
     - net: qrtr: ns: Limit the maximum number of lookups
     - net: bridge: use a stable FDB dst snapshot in RCU readers
     - net: mctp: fix don't require received header reserved bits to be zero
     - net: qrtr: ns: Limit the total number of nodes
     - spi: fix resource leaks on device setup failure
     - mm: prevent droppable mappings from being locked
     - crypto: authencesn - reject short ahash digests during instance creation
     - net: bonding: fix use-after-free in bond_xmit_broadcast() (CVE-2026-31419)
     - driver core: Add kernel-doc for DEV_FLAG_COUNT enum value
     - ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path
     - ALSA: caiaq: Don't abort when no input device is available
     - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets
     - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows
     - drm/amdgpu: fix zero-size GDS range init on RDNA4
     - ALSA: caiaq: fix usb_dev refcount leak on probe failure
     - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels
     - netfilter: reject zero shift in nft_bitwise
 .
   [ Ben Hutchings ]
   * Fix ordering of kernel version strings for multiple Debian revisions
     (Closes: #1113728)
   * rxrpc: Fix conn-level packet handling to unshare RESPONSE packets
 .
   [ Salvatore Bonaccorso ]
   * xfrm: esp: avoid in-place decrypt on shared skb frags
   * rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: Linux kernel
Source: https://www.kernel.org/pub/linux/kernel/
Files-Excluded: Documentation/netlabel/draft-ietf-cipso-ipsecurity-01.txt
 arch/powerpc/platforms/8xx/micropatch.c
 drivers/media/usb/dvb-usb/af9005-script.h
 drivers/video/fbdev/nvidia
 drivers/video/fbdev/riva
 tools/testing/selftests/tc-testing/action-ebpf
Comment:
 The 'perf' tool is dynamically linked with the Python interpreter,
 which is itself dynamically linked with OpenSSL, which is not
 GPL-compatible.  However, since perf itself does not link with or use
 OpenSSL, we believe that this indirect linking does not require
 additional permissions beyond the GPL.

Files: *
Copyright: 1991-2012 Linus Torvalds and many others
License: GPL-2

Files: debian/*
Copyright: 1996-2006 Manoj Srivastava
           2005-2012 Debian kernel team
           2006-2009 Bastian Blank <waldi@debian.org>
License: GPL-2

Files:
 arch/arm/boot/dts/allwinner/axp*.dts*
 arch/arm/boot/dts/allwinner/sun*.dts*
 arch/arm/boot/dts/amlogic/meson*.dts*
 arch/arm/boot/dts/arm/mps2*.dts*
 arch/arm/boot/dts/axis/artpec6.dtsi
 arch/arm/boot/dts/cnxt/cx92755*.dts*
 arch/arm/boot/dts/cros-ec-sbs.dtsi
 arch/arm/boot/dts/intel/socfpga/socfpga_cyclone5_vining_fpga.dts
 arch/arm/boot/dts/marvell/armada-370-d*.dts*
 arch/arm/boot/dts/marvell/armada-370-mirabox.dts
 arch/arm/boot/dts/marvell/armada-370-netgear*.dts*
 arch/arm/boot/dts/marvell/armada-370-rd.dts
 arch/arm/boot/dts/marvell/armada-370-synology-ds213j.dts
 arch/arm/boot/dts/marvell/armada-370.dtsi
 arch/arm/boot/dts/marvell/armada-375*.dts*
 arch/arm/boot/dts/marvell/armada-38*.dts*
 arch/arm/boot/dts/marvell/armada-39*.dts*
 arch/arm/boot/dts/marvell/armada-xp*.dts*
 arch/arm/boot/dts/marvell/kirkwood-linkstation*.dts*
 arch/arm/boot/dts/marvell/mvebu-linkstation-*.dts*
 arch/arm/boot/dts/marvell/orion5x-kuroboxpro.dts
 arch/arm/boot/dts/marvell/orion5x-linkstation*.dts*
 arch/arm/boot/dts/marvell/orion5x-ls*.dts*
 arch/arm/boot/dts/microchip/at91sam9260ek.dts
 arch/arm/boot/dts/microchip/at91sam9xe.dtsi
 arch/arm/boot/dts/microchip/sama5d2.dtsi
 arch/arm/boot/dts/microchip/sama5d4.dtsi
 arch/arm/boot/dts/nvidia/tegra124-apalis*.dts*
 arch/arm/boot/dts/nxp/imx/imx7*.dts*
 arch/arm/boot/dts/nxp/ls/ls*.dts*
 arch/arm/boot/dts/nxp/vf/vf610-colibri*.dts*
 arch/arm/boot/dts/nxp/vf/vf610m*.dts*
 arch/arm/boot/dts/qcom/qcom-mdm9615*.dts*
 arch/arm/boot/dts/rockchip/rk*.dts
 arch/arm/boot/dts/socionext/uniphier-*.dts*
 arch/arm/boot/dts/st/stm*.dts*
 arch/arm/boot/dts/synaptics/berlin2*.dts*
 arch/arm64/boot/dts/allwinner/*.dts*
 arch/arm64/boot/dts/amlogic/*.dts*
 arch/arm64/boot/dts/cavium/thunder-*.dts*
 arch/arm64/boot/dts/freescale/fsl-*.dts*
 arch/arm64/boot/dts/marvell/armada-*.dts*
 arch/arm64/boot/dts/rockchip/rk33*.dts*
 arch/arm64/boot/dts/socionext/uniphier-ld*.dts*
 arch/arm64/boot/dts/synaptics/berlin4ct-*.dts*
 include/dt-bindings/clock/sun*.h
 include/dt-bindings/dma/axi-dmac.h
 include/dt-bindings/dma/sun4i-a10.h
 include/dt-bindings/pinctrl/sun4i-a10.h
 include/dt-bindings/reset/sun*.h
Copyright: 2012-2018 Linus Torvalds and many others
License: GPL-2+-or-X11

Files: fs/nls/mac-*
Copyright: 1991-2012 Unicode, Inc.
License: Unicode-data
 All rights reserved.  Distributed under the Terms of Use in
 http://www.unicode.org/copyright.html.
 .
 Permission is hereby granted, free of charge, to any person obtaining a
 copy of the Unicode data files and any associated documentation (the "Data
 Files") or Unicode software and any associated documentation (the
 "Software") to deal in the Data Files or Software without restriction,
 including without limitation the rights to use, copy, modify, merge,
 publish, distribute, and/or sell copies of the Data Files or Software, and
 to permit persons to whom the Data Files or Software are furnished to do
 so, provided that (a) the above copyright notice(s) and this permission
 notice appear with all copies of the Data Files or Software, (b) both the
 above copyright notice(s) and this permission notice appear in associated
 documentation, and (c) there is clear notice in each modified Data File or
 in the Software as well as in the documentation associated with the Data
 File(s) or Software that the data or software has been modified.
 .
 THE DATA FILES AND SOFTWARE ARE PROVIDED "AS IS", WITHOUT WARRANTY OF ANY
 KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
 MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF
 THIRD PARTY RIGHTS.  IN NO EVENT SHALL THE COPYRIGHT HOLDER OR HOLDERS
 INCLUDED IN THIS NOTICE BE LIABLE FOR ANY CLAIM, OR ANY SPECIAL INDIRECT
 OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF
 USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
 OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
 PERFORMANCE OF THE DATA FILES OR SOFTWARE.
 .
 Except as contained in this notice, the name of a copyright holder shall
 not be used in advertising or otherwise to promote the sale, use or other
 dealings in these Data Files or Software without prior written
 authorization of the copyright holder.

Files: include/xen/interface/*
Copyright: 2002-2006 Keir Fraser
           2004 Tim Deegan
           2004 Andrew Warfield
           2005 Nguyen Anh Quynh
           2005-2006 IBM Corporation
           2005 Anthony Liguori
           2005 Rusty Russell
           2005-2006 XenSource Ltd.
           2006 Ian Campbell
           2006 Red Hat, Inc.
           2010 Ryan Wilson
License: Xen-interface
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to
 deal in the Software without restriction, including without limitation the
 rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
 sell copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 .
 The above copyright notice and this permission notice shall be included in
 all copies or substantial portions of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
 FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
 DEALINGS IN THE SOFTWARE.

Files: certs/extract-cert.c scripts/sign-file.c
Copyright: 2014-2015 Red Hat, Inc.
           2015 Intel Corporation
License: LGPL-2.1

Files: tools/lib/bpf/*
Copyright: 2015-2020 Linus Torvalds and many others
License: LGPL-2.1 or BSD-2-clause

Files: tools/bpf/bpftool/*
Copyright: 2017-2020 Linus Torvalds and many others
License: GPL-2 or BSD-2-clause

License: BSD-2-clause
  Redistribution and use in source and binary forms, with or without
  modification, are permitted provided that the following conditions are met:
  .
  1. Redistributions of source code must retain the above copyright notice,
     this list of conditions and the following disclaimer.
  .
  2. Redistributions in binary form must reproduce the above copyright
     notice, this list of conditions and the following disclaimer in the
     documentation and/or other materials provided with the distribution.
  .
  THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
  AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
  LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
  CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
  SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
  INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
  CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
  POSSIBILITY OF SUCH DAMAGE.

License: GPL-2
 This package is free software; you can redistribute it and/or modify
 it under the terms of the GNU General Public License version 2 as
 published by the Free Software Foundation.
 .
 This package is distributed in the hope that it will be useful,
 but WITHOUT ANY WARRANTY; without even the implied warranty of
 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 GNU General Public License for more details.
 .
 You should have received a copy of the GNU General Public License
 along with this program.  If not, see <https://www.gnu.org/licenses/>.
 .
 On Debian systems, the complete text of the GNU General Public License version
 2 can be found in `/usr/share/common-licenses/GPL-2'.

License: LGPL-2.1
 This program is free software; you can redistribute it and/or modify it
 under the terms of the GNU Lesser General Public License as published by
 the Free Software Foundation; either version 2.1 of the License, or
 (at your option) any later version.
 .
 This program is distributed in the hope that it will be useful, but
 WITHOUT ANY WARRANTY; without even the implied warranty of
 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
 Lesser General Public License for more details.
 .
 You should have received a copy of the GNU Lesser General Public License
 along with this program.  If not, see <https://www.gnu.org/licenses/>.
 .
 On Debian systems, the complete text of the GNU Lesser General Public
 License version 2.1 can be found in `/usr/share/common-licenses/LGPL-2.1'.

License: GPL-2+-or-X11
 This file is dual-licensed: you can use it either under the terms
 of the GPL or the X11 license, at your option. Note that this dual
 licensing only applies to this file, and not this project as a
 whole.
 .
  a) This file is free software; you can redistribute it and/or
     modify it under the terms of the GNU General Public License as
     published by the Free Software Foundation; either version 2 of the
     License, or (at your option) any later version.
 .
     This file is distributed in the hope that it will be useful,
     but WITHOUT ANY WARRANTY; without even the implied warranty of
     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
     GNU General Public License for more details.
 .
 Or, alternatively,
 .
  b) Permission is hereby granted, free of charge, to any person
     obtaining a copy of this software and associated documentation
     files (the "Software"), to deal in the Software without
     restriction, including without limitation the rights to use,
     copy, modify, merge, publish, distribute, sublicense, and/or
     sell copies of the Software, and to permit persons to whom the
     Software is furnished to do so, subject to the following
     conditions:
 .
     The above copyright notice and this permission notice shall be
     included in all copies or substantial portions of the Software.
 .
     THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
     EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
     OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
     NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
     HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
     WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
     FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
     OTHER DEALINGS IN THE SOFTWARE.