The sources where downloaded from http://www.springsource.com/download/community.
The exact zip file was located at http://s3.amazonaws.com/dist.springframework.org/release/SEC/spring-security-2.0.5.zip.

Files: *
Copyright: © 2004-2007 Acegi Technology Pty Limited,
           © 2008-2009 SpringSource Inc.
License: Apache-2.0
 The full text of the Apache 2.0 license is distributed in
 /usr/share/common-licenses/Apache-2.0 on Debian systems.

Files: debian/*
Copyright: © 2010 Miguel Landaeta <miguel@miguel.cc>
License: Apache-2.0
 The full text of the Apache 2.0 license is distributed in
 /usr/share/common-licenses/Apache-2.0 on Debian systems.