Bug#539384: anjuta: Linked with OpenSSL, seems to be a GPL violation

Adrian Bunk bunk at stusta.de
Fri Jul 31 18:05:26 UTC 2009


[ adding the Subversion maintainer to the Cc ]

On Fri, Jul 31, 2009 at 03:10:49PM +0200, Emilio Pozuelo Monfort wrote:
> Hey Adrian :)
> 
> Adrian Bunk wrote:
> > Package: anjuta
> > Version: 2:2.26.2.2-1
> > Severity: serious
> > 
> > $ ldd /usr/lib/anjuta/libanjuta-subversion.so | grep ssl
> >         libssl.so.0.9.8 => /usr/lib/libssl.so.0.9.8 (0x00007f51e9e8b000)
> > $ 
> 
> [...]
> 
> > It might be enough to change the libneon build dependency
> > to libneon27-gnutls-dev.
> 
> I've tried that, it's not enough. But even if it was, libanjuta-subversion.so
> links to libsvn_client-1.so.1, which links to libssl.so.0.9.8, so it would still
> be a problem, right?

Right.

That seems to come through libserf.

It seems GPL'ed software without an OpenSSL licence exception linked 
against libsvn is a candidate for my next batch of GPL violation RC bugs...

@Peter:
How important is the libserf usage in SVN, and are you aware of this problem?

> The plugin however says:
> 
> $ grep License plugins/subversion/anjuta-subversion.plugin.in
> License=The subversion plugin includes cryptographic software written by Eric
> Young (eay at cryptsoft.com).\nThe code of the plugin itself remains GPL licensed
> and we hereby grant permission\n to link anjuta against OpenSSL.
> 
> None of the C files include such an exception though, so I'm not sure that's
> enough. If it is, we can just put it in the copyright file, if it's not, we can
> disable the subversion plugin and notify upstream about it, until it's fixed.
> 
> Do you know if that exception outside of the C code is enough?

If it would be in the toplevel COPYING file it might be (but IANAL).

But are all contributors aware that there's a licence exception for the 
whole software hidden in some random file in the tree? I'd doubt it.

> Cheers,
> Emilio

cu
Adrian

-- 

       "Is there not promise of rain?" Ling Tan asked suddenly out
        of the darkness. There had been need of rain for many days.
       "Only a promise," Lao Er said.
                                       Pearl S. Buck - Dragon Seed







More information about the pkg-gnome-maintainers mailing list