Hi Philipp,Thanks for clarifying that. There is one file in cyrus-sasl2 that is licensed under BSD-4-clause-KTH (which really has an advertisement clause), which we can get rid of; see https://github.com/cyrusimap/cyrus-sasl/pull/724.
The OpenSSL license can be eliminated by repackaging. This leaves us with the two supposedly GPL-incompatible licenses BSD-3-Clause-Attribution and RSA-MD. Thanks for taking care of this, Bastian

