Thanks Alvin, we already did that in BIND 9.16+, so I merged the change in BIND 9.11 branch and it will be included in the next BIND 9 release.
I’ll speak to the release team if we will ignore it for Debian stable, or we will have to do the dance with dfsg tarball. Ondrej -- Ondřej Surý ond...@sury.org > On 2 Mar 2020, at 08:37, Alvin Chen <sonoma...@gmail.com> wrote: > > Source: bind9 > Severity: serious > > Since headers provided by OASIS PKCS11 are not-exactly free license > (they do not allow modification), > > You can use an alternative header like p11-kit which is licensed under > a more liberal license. > > bind9/lib/isc/include/pkcs11 > > Regards, > Alvin Chen >
signature.asc
Description: Message signed with OpenPGP
