Source: qemu Version: 1:7.2+dfsg-6 Severity: serious Hi,
the qemu-system-* binaries depends on libsasl2-2, which is licensed under CMU's BSD-3-Clause-Attribution license and covered by the RSA-MD license. They have clauses in place, which are known to be incompatible with GPL (as far as I can see the mentioned binaries' license). There are several possible solutions to this problem:
1) Build without VNC SASL support. Just get rid of the Build-Dependency libsasl2-dev. 2) Support my request at #996892. 3) Ask upstream to add a license exception for libsasl2-2, similar to the one that was required by Debian for OpenSSL for a long time. Thanks for your consideration, Bastian
