JBoss Modules 1.4.1.Final copyright clarification needed

I am in the process of packaging JBoss modules 1.4.1.Final from https://github.com/jboss-modules/jboss-modules for Debian.

I would appreciate if you could clarify the license information for JBoss Modules.

Readme.md states that all code is distributed under ASL 2.0 and XPP3. Does this imply that all code is dual-licensed under either ASL-2.0 or XPP3?

Otherwise this would mean that at least the following files are non-free according to Debian's Free Software Guidelines and incompatible with the GPL because they incorporate the infamous BSD advertising clause.

src/main/java/org/jboss/modules/xml/XmlPullParser.java
src/main/java/org/jboss/modules/xml/XmlPullParserException.java
src/main/java/org/jboss/modules/xml/MXParser.java

Also pom.xml states that at least this file is licensed under LGPL-2.1 or later.

Thanks in advance