On gio, mar 13, 2014 at 10:54:10 +0000, Clint Adams wrote: > Package: libcurl4-gnutls-dev > Version: 7.35.0-1 > Severity: critical > Control: block 741557 by -1 > > On Thu, Mar 13, 2014 at 06:25:14PM -0400, Daniel Kahn Gillmor wrote: > > I agree with the suggestion that libcurl3-gnutls (or libcurl4-gnutls? > > that's the stated build-dep for libmsv) should switch to > > libgnutls28-dev. perhaps that's worth making a separate bug report.
Well, nope. libgnutls28 still links against libgmp10 which is still LGPL3+.
Unless I'm missing something that would make git (GPL2only) unredistributable.
So no, that's not actually possible (again, unless I'm missing something).
Now, I've got tired of the debian-devel discussion on the subject pretty early
so I haven't followed it till the end, but I was told that gmp upstream has
changed the license to LGPL3+ || GPL2 or something like that. But AFAICT that
has not yet gotten into Debian.
Also, I don't see how this is a critical bug in curl. If your concern is
libapache2-mod-gnutls why not just switch it back to libgnutls26?
Cheers
--
perl -E '$_=q;$/= @{[@_]};and s;\S+;<inidehG ordnasselA>;eg;say~~reverse'
signature.asc
Description: Digital signature
