On Thu, 13 Apr 2023 14:36:12 +0200 Bastian Germann <b...@debian.org> wrote:
Hi Philipp,Thanks for clarifying that. There is one file in cyrus-sasl2 that is licensed under BSD-4-clause-KTH (which really has an advertisement clause), which we can get rid of; see https://github.com/cyrusimap/cyrus-sasl/pull/724.The OpenSSL license can be eliminated by repackaging. This leaves us with the two supposedly GPL-incompatible licenses BSD-3-Clause-Attribution and RSA-MD.
For RSA-MD, I'd imagine there are other MD5 implementations that could be dropped in relatively easily.
For BSD-3-Clause-Attribution, as anyone reached out to CMU (e.g. at tech-trans...@andrew.cmu.edu) to ask them to remove clause 3, like the University of California, Berkeley did in 1999:
https://en.wikipedia.org/wiki/BSD_licenses#3-clause_license_(%22BSD_License_2.0%22,_%22Revised_BSD_License%22,_%22New_BSD_License%22,_or_%22Modified_BSD_License%22) https://www.freebsd.org/copyright/license/ -- Richard
OpenPGP_signature
Description: OpenPGP digital signature
