Markus & Laszlo,
Even if upx-nrv has been in Debian for over 10 years, we are still unsure if Debian can distribute and/or auto-build the package (where auto-building in this case means running `./upx -d upx' on your pre-compiled version of upx and putting the resulting binary into Debian package). Several points has came up in recent discussion: - the license of NRV library is nowhere to be found; - the license of UPX mentions the UCL version only; - UPX license seems to be GPL, but GPL doesn't allow anybody to redistribute binaries without sources unless some special permission to do so is granted; - exception to GPL is required to link GPL'ed-program with non-free library; - does UPX license allows us to distribute an unpacked version of upx (i.e. distribute the result of `upx -d upx')? Ansgar Burchardt suggests the following ways to solve the issues: > > In any case the problem could be solved if upstream a, makes available > headers and object files for nrv and adds an exception to the UPX > license to link against nrv and distribute the resulting binaries > similar to exceptions that allow linking GPL code with other > GPL-incompatible libraries such as OpenSSL, or b, releases the binaries > for upx-nrv under a license that allows distribution w/o providing > corresponding source code (or other problematic requirements). It might > also need to allow distributing the "modified" binaries obtained by > running upx -d in debian/rules as well. Of course the license for nrv > must also allow this. > The full story can be found at: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=661372 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659541 If the bug doesn't get fixed, the upx-nrv will need to be removed from Debian. Markus, Laszlo, could you please dispel our doubts about the upx-nrv license? Regards, robert
signature.asc
Description: OpenPGP digital signature
