[ adding the Subversion maintainer to the Cc ] On Fri, Jul 31, 2009 at 03:10:49PM +0200, Emilio Pozuelo Monfort wrote: > Hey Adrian :) > > Adrian Bunk wrote: > > Package: anjuta > > Version: 2:2.26.2.2-1 > > Severity: serious > > > > $ ldd /usr/lib/anjuta/libanjuta-subversion.so | grep ssl > > libssl.so.0.9.8 => /usr/lib/libssl.so.0.9.8 (0x00007f51e9e8b000) > > $ > > [...] > > > It might be enough to change the libneon build dependency > > to libneon27-gnutls-dev. > > I've tried that, it's not enough. But even if it was, libanjuta-subversion.so > links to libsvn_client-1.so.1, which links to libssl.so.0.9.8, so it would > still > be a problem, right?
Right. That seems to come through libserf. It seems GPL'ed software without an OpenSSL licence exception linked against libsvn is a candidate for my next batch of GPL violation RC bugs... @Peter: How important is the libserf usage in SVN, and are you aware of this problem? > The plugin however says: > > $ grep License plugins/subversion/anjuta-subversion.plugin.in > License=The subversion plugin includes cryptographic software written by Eric > Young (e...@cryptsoft.com).\nThe code of the plugin itself remains GPL > licensed > and we hereby grant permission\n to link anjuta against OpenSSL. > > None of the C files include such an exception though, so I'm not sure that's > enough. If it is, we can just put it in the copyright file, if it's not, we > can > disable the subversion plugin and notify upstream about it, until it's fixed. > > Do you know if that exception outside of the C code is enough? If it would be in the toplevel COPYING file it might be (but IANAL). But are all contributors aware that there's a licence exception for the whole software hidden in some random file in the tree? I'd doubt it. > Cheers, > Emilio cu Adrian -- "Is there not promise of rain?" Ling Tan asked suddenly out of the darkness. There had been need of rain for many days. "Only a promise," Lao Er said. Pearl S. Buck - Dragon Seed -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org