Hey Adrian :)

Adrian Bunk wrote:
> Package: anjuta
> Version: 2:2.26.2.2-1
> Severity: serious
> 
> $ ldd /usr/lib/anjuta/libanjuta-subversion.so | grep ssl
>         libssl.so.0.9.8 => /usr/lib/libssl.so.0.9.8 (0x00007f51e9e8b000)
> $ 

[...]

> It might be enough to change the libneon build dependency
> to libneon27-gnutls-dev.

I've tried that, it's not enough. But even if it was, libanjuta-subversion.so
links to libsvn_client-1.so.1, which links to libssl.so.0.9.8, so it would still
be a problem, right?

The plugin however says:

$ grep License plugins/subversion/anjuta-subversion.plugin.in
License=The subversion plugin includes cryptographic software written by Eric
Young (e...@cryptsoft.com).\nThe code of the plugin itself remains GPL licensed
and we hereby grant permission\n to link anjuta against OpenSSL.

None of the C files include such an exception though, so I'm not sure that's
enough. If it is, we can just put it in the copyright file, if it's not, we can
disable the subversion plugin and notify upstream about it, until it's fixed.

Do you know if that exception outside of the C code is enough?

Cheers,
Emilio

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to