[ adding the Subversion maintainer to the Cc ]

On Fri, Jul 31, 2009 at 03:10:49PM +0200, Emilio Pozuelo Monfort wrote:
> Hey Adrian :)
> 
> Adrian Bunk wrote:
> > Package: anjuta
> > Version: 2:2.26.2.2-1
> > Severity: serious
> > 
> > $ ldd /usr/lib/anjuta/libanjuta-subversion.so | grep ssl
> >         libssl.so.0.9.8 => /usr/lib/libssl.so.0.9.8 (0x00007f51e9e8b000)
> > $ 
> 
> [...]
> 
> > It might be enough to change the libneon build dependency
> > to libneon27-gnutls-dev.
> 
> I've tried that, it's not enough. But even if it was, libanjuta-subversion.so
> links to libsvn_client-1.so.1, which links to libssl.so.0.9.8, so it would 
> still
> be a problem, right?

Right.

That seems to come through libserf.

It seems GPL'ed software without an OpenSSL licence exception linked 
against libsvn is a candidate for my next batch of GPL violation RC bugs...

@Peter:
How important is the libserf usage in SVN, and are you aware of this problem?

> The plugin however says:
> 
> $ grep License plugins/subversion/anjuta-subversion.plugin.in
> License=The subversion plugin includes cryptographic software written by Eric
> Young (e...@cryptsoft.com).\nThe code of the plugin itself remains GPL 
> licensed
> and we hereby grant permission\n to link anjuta against OpenSSL.
> 
> None of the C files include such an exception though, so I'm not sure that's
> enough. If it is, we can just put it in the copyright file, if it's not, we 
> can
> disable the subversion plugin and notify upstream about it, until it's fixed.
> 
> Do you know if that exception outside of the C code is enough?

If it would be in the toplevel COPYING file it might be (but IANAL).

But are all contributors aware that there's a licence exception for the 
whole software hidden in some random file in the tree? I'd doubt it.

> Cheers,
> Emilio

cu
Adrian

-- 

       "Is there not promise of rain?" Ling Tan asked suddenly out
        of the darkness. There had been need of rain for many days.
       "Only a promise," Lao Er said.
                                       Pearl S. Buck - Dragon Seed




-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to