Bug#996892: cyrus-sasl2: consider handling as system library

2023-08-24 Thread Bastian Germann
I am closing this request because the major pain points are resolved. Philipp, please reopen if you do not agree.

Bug#996892: cyrus-sasl2: consider handling as system library

2023-08-01 Thread Bastian Germann
On Thu, 13 Apr 2023 14:36:12 +0200 Bastian Germann wrote: This leaves us with the two supposedly GPL-incompatible licenses BSD-3-Clause-Attribution and RSA-MD. I have ported the unreleased upstream changes including the relicensing of the RSA-MD code back to the unstable Debian version. This

Bug#996892: cyrus-sasl2: consider handling as system library

2023-06-27 Thread Richard Laager
On 2023-06-27 16:19, Richard Laager wrote: For BSD-3-Clause-Attribution BTW, my suggestion of asking CMU to drop the clause should not be read as taking or agreeing to the position that it is GPL-incompatible. I don't actually see an incompatibility with BSD-3-Clause-Attribution. The

Bug#996892: cyrus-sasl2: consider handling as system library

2023-06-27 Thread Richard Laager
On 2023-06-27 16:19, Richard Laager wrote: For RSA-MD, I'd imagine there are other MD5 implementations that could be dropped in relatively easily. Also, Bastian Germann mentioned in bug #1036113: "See https://github.com/cyrusimap/cyrus-sasl/issues/513 for an implementation that leaves only

Bug#996892: cyrus-sasl2: consider handling as system library

2023-06-27 Thread Richard Laager
On Thu, 13 Apr 2023 14:36:12 +0200 Bastian Germann wrote: Hi Philipp, Thanks for clarifying that. There is one file in cyrus-sasl2 that is licensed under BSD-4-clause-KTH (which really has an advertisement clause), which we can get rid of; see https://github.com/cyrusimap/cyrus-sasl/pull/724.

Bug#996892: cyrus-sasl2: consider handling as system library

2023-04-13 Thread Bastian Germann
Hi Philipp, Thanks for clarifying that. There is one file in cyrus-sasl2 that is licensed under BSD-4-clause-KTH (which really has an advertisement clause), which we can get rid of; see https://github.com/cyrusimap/cyrus-sasl/pull/724. The OpenSSL license can be eliminated by repackaging.

Bug#996892: cyrus-sasl2: consider handling as system library

2023-04-13 Thread Philipp Hahn
Hello fellow DDs, Looking at [cyrus-sasl/COPYING](https://github.com/cyrusimap/cyrus-sasl/blob/master/COPYING) I find this text: * 1. Redistributions of source code must retain the above copyright *notice, this list of conditions and the following disclaimer. * * 2. Redistributions

Bug#996892: cyrus-sasl2: consider handling as system library

2021-11-14 Thread Bastian Germann
On Wed, 20 Oct 2021 12:42:58 +0200 Bastian Germann wrote: As you probably know, BSD-4-clause has the same problem (advertisement clause in combination with GPL) as the OpenSSL license. With cyrus-sasl2 (libsasl2-2), there is one important BSD-4-clause licensed package in the archive.

Bug#996892: cyrus-sasl2: consider handling as system library

2021-10-20 Thread Bastian Germann
Package: ftp.debian.org Severity: important Hi, At http://meetbot.debian.net/debian-ftp/2020/debian-ftp.2020-03-13-20.02.html you decided to handle "OpenSSL, cups and libgcc as system libraries" to enable publishing combined works under GPL (version 2 for cups and libgcc; any version for