Bug#508292: gkrellm-snmp links against openssl without exception

[Michael Banck]

Hi,

I have uploaded the attached interdiff as NMU.


Cheers,

Michael
diff -u gkrellm-snmp-1.0/debian/changelog gkrellm-snmp-1.0/debian/changelog
--- gkrellm-snmp-1.0/debian/changelog
+++ gkrellm-snmp-1.0/debian/changelog
@@ -1,3 +1,11 @@
+gkrellm-snmp (1.0-1.2) unstable; urgency=low
+
+  * Non-maintainer upload.
+  * gkrellm_snmp.c: Updated with clarified license header from 1.1 release.
+  * debian/copyright: Updated. (Closes: #508292)
+
+ -- Michael Banck   Sun, 29 Nov 2009 11:48:58 +0100
+
 gkrellm-snmp (1.0-1.1) unstable; urgency=low
 
   * Non-maintainer upload.
diff -u gkrellm-snmp-1.0/debian/copyright gkrellm-snmp-1.0/debian/copyright
--- gkrellm-snmp-1.0/debian/copyright
+++ gkrellm-snmp-1.0/debian/copyright
@@ -7,23 +7,33 @@
 
 Upstream Author: Christian W. Zuckschwerdt 
 
-Copyright: Copyright (C) 2000-2006 Christian W. Zuckschwerdt 
+Copyright: Copyright (C) 2000-2009 Christian W. Zuckschwerdt 
 
 License:
 --
-This program is free software which I release under the GNU General Public
-License. You may redistribute and/or modify this program under the terms
-of that license as published by the Free Software Foundation; either
-version 2 of the License, or (at your option) any later version.
-
-This program is distributed in the hope that it will be useful,
-but WITHOUT ANY WARRANTY; without even the implied warranty of
-MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-GNU General Public License for more details.
-
-To get a copy of the GNU General Puplic License,  write to the Free
-Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
-02110-1301, USA.
+  GKrellM_SNMP is free software; you can redistribute it and/or
+  modify it under the terms of the GNU General Public License as
+  published by the Free Software Foundation; either version 2 of
+  the License, or (at your option) any later version.
+
+  In addition, as a special exception, the copyright holders give
+  permission to link the code of this program with the OpenSSL library,
+  and distribute linked combinations including the two.
+  You must obey the GNU General Public License in all respects
+  for all of the code used other than OpenSSL.  If you modify
+  file(s) with this exception, you may extend this exception to your
+  version of the file(s), but you are not obligated to do so.  If you
+  do not wish to do so, delete this exception statement from your
+  version.  If you delete this exception statement from all source
+  files in the program, then also delete it here.
+
+  This program is distributed in the hope that it will be useful,
+  but WITHOUT ANY WARRANTY; without even the implied warranty of
+  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+  GNU General Public License for more details.
+
+  You should have received a copy of the GNU General Public License
+  along with GKrellM_SNMP. If not, see .
 
 On Debian GNU/Linux systems, the complete text of the GNU General
 Public License can be found in `/usr/share/common-licenses/GPL'.
only in patch2:
unchanged:
--- gkrellm-snmp-1.0.orig/gkrellm_snmp.c
+++ gkrellm-snmp-1.0/gkrellm_snmp.c
@@ -1,22 +1,32 @@
 /* SNMP reader plugin for GKrellM 
-|  Copyright (C) 2000-2006  Christian W. Zuckschwerdt 
+|  Copyright (C) 2000-2009  Christian W. Zuckschwerdt 
 |
 |  Author:  Christian W. Zuckschwerdthttp://triq.net/
 |  Latest versions might be found at:  http://gkrellm.net/
 |
-| This program is free software; you can redistribute it and/or
-| modify it under the terms of the GNU General Public License
-| as published by the Free Software Foundation; either version 2
-| of the License, or (at your option) any later version.
+| GKrellM_SNMP is free software; you can redistribute it and/or
+| modify it under the terms of the GNU General Public License as
+| published by the Free Software Foundation; either version 2 of
+| the License, or (at your option) any later version.
 |
+| In addition, as a special exception, the copyright holders give
+| permission to link the code of this program with the OpenSSL library,
+| and distribute linked combinations including the two.
+| You must obey the GNU General Public License in all respects
+| for all of the code used other than OpenSSL.  If you modify
+| file(s) with this exception, you may extend this exception to your
+| version of the file(s), but you are not obligated to do so.  If you
+| do not wish to do so, delete this exception statement from your
+| version.  If you delete this exception statement from all source
+| files in the program, then also delete it here.
+
 | This program is distributed in the hope that it will be useful,
 | but WITHOUT ANY WARRANTY; without even the implied warranty of
 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | GNU General Public License for more details.
-|
+
 | You should have received a copy of the GNU General Public License
-| along w

Bug#508292: gkrellm-snmp links against openssl without exception

[Steve Langasek]

tags 508292 lenny-ignore
thanks

David,

Please don't NMU to version 1.1 via t-p-u.  It should be sufficient to copy
upstream's license exception statement into debian/copyright, which is a
much more straightforward fix and avoids clobbering the maintainer's
versioning (you should definitely not number an NMU 1.1-1.1 when there
hasn't been a 1.1-1 upload by the maintainer!).

In fact, I believe that this bug should already not be considered RC for
lenny.  The licensing information found in debian/copyright is correct,
despite the fact that additional permissions have been granted; and because
the permission has been granted, there are no licensing problems that make
the package itself unreleasable.  I'm therefore marking this bug
'lenny-ignore', but cc:ing debian-release so the RMs have an opportunity to
override me if they disagree.

Cheers,
-- 
Steve Langasek   Give me a lever long enough and a Free OS
Debian Developer   to set it on, and I can move the world.
Ubuntu Developerhttp://www.debian.org/
slanga...@ubuntu.com vor...@debian.org



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#508292: gkrellm-snmp links against openssl without exception

[Niko Tyni]

found 508292 1.0-1
thanks

On Tue, Dec 09, 2008 at 12:40:14PM -0500, Barry deFreese wrote:
> Package: gkrellm-snmp
> Version: 1.0-1.1
> Severity: Serious
>
> Hello,
>
> While working on an NMU for gkrellm-snmp, I noticed that the package is  
> linked against Openssl libraries without a license exception.
>
> Probably need to contact upstream to see if they can use gnutls or  
> possibly snmpv3 will give the required functionality.

This applies to the lenny version too, so noting that to the BTS.

The direct openssl linkage could be easily eliminated because the binary
doesn't really need it:

dpkg-shlibdeps: warning: dependency on libcrypto.so.0.9.8 could be avoided if 
"debian/gkrellm-snmp/usr/lib/gkrellm2/plugins/gkrellm_snmp.so" were not 
uselessly linked against it (they use none of its symbols).

However, I understand transitive openssl linkage through libsnmp15 is just as 
bad.

Reading #501145 and 

 http://lintian.debian.org/tags/possible-gpl-code-linked-with-openssl.html

this is quite a big can of worms to open...
-- 
Niko Tyni   nt...@debian.org



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Processed: Re: Bug#508292: gkrellm-snmp links against openssl without exception

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> found 508292 1.0-1
Bug#508292: gkrellm-snmp links against openssl without exception
Bug marked as found in version 1.0-1.

> thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#508292: gkrellm-snmp links against openssl without exception

[Barry deFreese]

Package: gkrellm-snmp
Version: 1.0-1.1
Severity: Serious

Hello,

While working on an NMU for gkrellm-snmp, I noticed that the package is 
linked against Openssl libraries without a license exception.


Probably need to contact upstream to see if they can use gnutls or 
possibly snmpv3 will give the required functionality.


Thank you,

Barry deFreese



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]