Hello fellow DDs,

Looking at [cyrus-sasl/COPYING](https://github.com/cyrusimap/cyrus-sasl/blob/master/COPYING) I find this text:

* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer. *
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in
 *    the documentation and/or other materials provided with the
 *    distribution.
 *
 * 3. The name "Carnegie Mellon University" must not be used to
 *    endorse or promote products derived from this software without
 *    prior written permission. For permission or any other legal
* details, please contact
...
 * 4. Redistributions of any form whatsoever must retain the following
 *    acknowledgment:
 *    "This product includes software developed by …."

This looks like [BSD-3-Clause-Attribution](https://spdx.org/licenses/BSD-3-Clause-Attribution.html) to me:

1. Redistributions of source code must retain the above copyright notice, this 
list of conditions and the following disclaimer.

2. Redistributions in binary form must reproduce the above copyright notice, 
this list of conditions and the following disclaimer in the documentation 
and/or other materials provided with the distribution.
> 3. Neither the name of the copyright holder nor the names of its
contributors may be used to endorse or promote products derived from this software without specific prior written permission.

4. Redistributions of any form whatsoever must retain the following 
acknowledgment: 'This product includes software developed by the ….'


Not [BSD-4-Clause](https://spdx.org/licenses/BSD-4-Clause.html) which differs in 3 and 4:

3. All advertising materials mentioning features or use of this software must 
display the following acknowledgement:
This product includes software developed by the organization.

4. Neither the name of the copyright holder nor the names the copyright holder 
nor the names of its contributors may be used to endorse or promote products 
derived from this software without specific prior written permission.


See <https://github.com/cyrusimap/cyrus-sasl/issues/594#issuecomment-1506743164> for a nicer comparison.

Looking at [popcon](https://qa.debian.org/popcon.php?package=cyrus-sasl2) I see the library to be install almost everywhere, which IMHO would qualify it as a "system library":

libsasl2-2      209141  99.40%  86

What needs to be done to get this bug move forward?

Thanks
pmhahn
--
Philipp Hahn
Open Source Software Engineer

Univention GmbH
be open.
Mary-Somerville-Str. 1
D-28359 Bremen

📞 +49-421-22232-57
🖶 +49-421-22232-99

✉️ h...@univention.de
🌐 https://www.univention.de/

Geschäftsführer: Peter H. Ganten, Stefan Gohmann
HRB 20755 Amtsgericht Bremen
Steuer-Nr.: 71-597-02876

Reply via email to