Am 27.02.20 um 06:48 schrieb Pino Toscano: > In data mercoledì 26 febbraio 2020 23:40:52 CET, Bastian Germann ha > scritto: >> Package: libqt5network5 Severity: normal >> >> This package links to libssl. > > No, it does not. > > ... > > QtNetwork can be built to link against OpenSSL, and we built it to > dlopen it instead, exactly for the reasons mentioned. The > dependency of the libqt5network5 package is added with a trivial > test program at build time, so installing libqt5network5 pulls the > OpenSSL library it was built against (easier to track & rebuild on > OpenSSL SONAME bumps). >
You are right. Sorry about that. Adding the license exception in debian/copyright would still benefit reverse dependent GPL packages that want to add a dependency on OpenSSL themselves and have to look this up in the source otherwise.