As of version 2.2.0, the license for Phusion Passenger is MIT, not GPL-2. See the bug URL for the relevant commit.
The version number in the bug summary may raise some eyebrows, but that's because the license change happened some 13 years ago and the ebuild was never updated to reflect this. Per GitHub, the commit changing the license was made on February 15, 2009, and version 2.2.0 of Passenger was released on April 16, 2009.
Thanks for the report, it looks like we missed that license change all these year ago. The situation is slightly more complicated, though, because passenger also bundles some modified code from other projects and these licenses should also be met. It looks like "Boost-1.0 MIT BSD" should cover all code included.
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f2faed039b057ac726ad92366c5279afbd0facb0 commit f2faed039b057ac726ad92366c5279afbd0facb0 Author: Hans de Graaff <graaff@gentoo.org> AuthorDate: 2022-05-08 07:57:45 +0000 Commit: Hans de Graaff <graaff@gentoo.org> CommitDate: 2022-05-08 08:00:10 +0000 www-apache/passenger: update LICENSE The license for Passenger itself was not correct and we also need to include licenses for vendored code. Thanks to Brian W. for reporting the issue. Closes: https://bugs.gentoo.org/843230 Signed-off-by: Hans de Graaff <graaff@gentoo.org> www-apache/passenger/passenger-6.0.11.ebuild | 4 ++-- www-apache/passenger/passenger-6.0.13.ebuild | 3 ++- 2 files changed, 4 insertions(+), 3 deletions(-)