Control: tag -1 + moreinfo
Control: found -1 1:3.0+dfsg-1
15.05.2023 19:49, Bastian Germann wrote:
Source: qemu
Version: 1:7.2+dfsg-6
Severity: serious
Hi,
the qemu-system-* binaries depends on libsasl2-2, which is licensed under CMU's BSD-3-Clause-Attribution license and covered by the RSA-MD license.
They have clauses in place, which are known to be incompatible with GPL (as far as I can see the mentioned binaries' license). There are several
possible solutions to this problem:
Can you be a bit more specific please, about the "known to be incompatible"
part?
Known to whom? Can this knowledge be shared?
1) Build without VNC SASL support. Just get rid of the Build-Dependency
libsasl2-dev.
2) Support my request at #996892.
3) Ask upstream to add a license exception for libsasl2-2, similar to the one
that was required by Debian for OpenSSL
for a long time.
Again, can you please provide a bit more context here, which exception are you
talking
about, exactly? Maybe some particular wording example?
It's quite sad this issue has popped up this close to the release.
This condition has been here forever, marking as found in 3.0 (arbitrary).
Thanks,
/mjt
