Bug#1023923: veyon-plugins: license conflict with libsasl2

2022-11-20 Thread Mike Gabriel 

On  Sa 12 Nov 2022 14:27:53 CET, Bastian Germann wrote:


Package: veyon-plugins
Version: 4.7.4+repack1-1
Severity: serious

Hi,

libkldap-light.so depends on libsasl2-2, which is licensed under  
CMU's BSD-4-clause license and covered by the RSA-MD and OpenSSL  
licenses. All of them have an advertisement clause in place, which  
is known to be incompatible with the GPL. There are several possible  
solutions to this problem:


1) Build without the plugin.


Not optimal as a solution.


2) Support my request at #996892.


Will do.

3) Ask upstream to change this plugin's license or add a license  
exception for libsasl2-2, similar to the one that was required by  
Debian for OpenSSL for a long time.


I will contact upstream on this, as well. Opening up another pathway  
to fixing this.


Mike
--

DAS-NETZWERKTEAM
c\o Technik- und Ökologiezentrum Eckernförde
Mike Gabriel, Marienthaler Str. 17, 24340 Eckernförde
mobile: +49 (1520) 1976 148
landline: +49 (4351) 850 8940

GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22  0782 9AF4 6B30 2577 1B31
mail: mike.gabr...@das-netzwerkteam.de, http://das-netzwerkteam.de



pgp5mMfThdORh.pgp
Description: Digitale PGP-Signatur

Bug#1023923: veyon-plugins: license conflict with libsasl2

2022-11-12 Thread Bastian Germann 

Package: veyon-plugins
Version: 4.7.4+repack1-1
Severity: serious

Hi,

libkldap-light.so depends on libsasl2-2, which is licensed under CMU's BSD-4-clause license and covered by the RSA-MD 
and OpenSSL licenses. All of them have an advertisement clause in place, which is known to be incompatible with the GPL. 
There are several possible solutions to this problem:


1) Build without the plugin.

2) Support my request at #996892.

3) Ask upstream to change this plugin's license or add a license exception for libsasl2-2, similar to the one that was 
required by Debian for OpenSSL for a long time.


Thanks for your consideration,
Bastian