15.05.2023 19:49, Bastian Germann wrote:
the qemu-system-* binaries depends on libsasl2-2, which is licensed under CMU's BSD-3-Clause-Attribution license and covered by the RSA-MD license. They have clauses in place, which are known to be incompatible with GPL (as far as I can see the mentioned binaries' license).
I'm not a licensing expert. Here's a personal opinion of one of the QEMU developers (and note this attribution, not advertising): <danpb> mjt: mho clause 4 attribution is satisfied by simply always providing the full corresponding source tarball alongside the binary tarball, or by including the license file text in the binary dist <danpb> the attribution clause looks unpleasant, but imho it is defanged by not giving any specific rules about /how/ you must attribute them <danpb> the original BSD-4 clause was a serious problem because it specifically mentioned "All advertising materials mentioning features or use of this software" <danpb> IOW, it proscribed a specific rule for how you must attribute (Just another point of view here).