[Pkg-clamav-devel] clamav 0.98.3 released

Andreas Cadhalpun andreas.cadhalpun at googlemail.com
Fri May 9 20:41:44 UTC 2014


Hi,

On 09.05.2014 22:01, Andreas Cadhalpun wrote:
> I'm currently looking at updating debian/copyright.

I think we have a major problem here: None of clamav's 
reverse-dependencies (c-icap-modules, dansguardian, havp, python-clamav) 
have an OpenSSL exception.

I have no clue about how to procede, now that clamav depends on openssl.

Any ideas?

Besides COPYING contains:
             REGARDING OPENSSL

  In addition, as a special exception, the copyright holders give
  permission to link the code of portions of this program with the
  OpenSSL library under certain conditions as described in each
  individual source file, and distribute linked combinations
  including the two.

I'm not sure, if this is a wide enough exception, particular as many 
files (in the libclamav directory) include OpenSSL headers, but only a 
few (e.g. crypto.c and crypto.h) have an OpenSSL exception in the file, 
as required by above general notice. And even in those files this 
exception doesn't explain the 'certain conditions', but is rather a copy 
of above notice.

I'm no lawyer, but this seems to be problematic.

Best regards,
Andreas




More information about the Pkg-clamav-devel mailing list