On Tue, 19 Oct 2021 23:41:52 +0200 Bastian Germann wrote:
Please reconsider the package license, at least for the patches. Currently you have
debian/* licensed under GPL-3+, which means that all the debian/patches/* files are
GPL-3+. This has two problems:
1) cyrus-sasl2 is a basic package that is used by many packages that might not expect to
have GPL-3+ in their dependency trees. Especially GPL-2-only licensed packages are not
compatible with GPL-3+.
2) Supposedly, GPL (any version) itself is incompatible with the advertisement clause in
BSD-4-clause. While the University of California has issued an official statement that
this clause can be ignored for their software, I do not know of any such statement from
Carnegie Mellon University. So it should be fairly controversial if Debian's patched
cyrus-sasl2 binaries are legally distributable.
Hi Ondřej,
From the git history I can see that you introduced a license change from "GPL-2+ or
BSD-2-clause"
to GPL-3+, which causes this problem. I have looked at every patch provenance
and most of the
patches were already contained at the time of the change. The ones that were
not there are mostly
upstream patches except two of them. One could be eliminated. This leaves us
with BSD-2-clause
licensed patches with the exception of
0017-Just-completely-remove-libobj-from-autotools-files.patch
by you. Would you be so kind to relicense this via deleting it from
debian/copyright?
Thanks,
Bastian
