Bug#539384: anjuta: Linked with OpenSSL, seems to be a GPL violation

[Emilio Pozuelo Monfort]

Hey Adrian :)

Adrian Bunk wrote:
> Package: anjuta
> Version: 2:2.26.2.2-1
> Severity: serious
> 
> $ ldd /usr/lib/anjuta/libanjuta-subversion.so | grep ssl
>         libssl.so.0.9.8 => /usr/lib/libssl.so.0.9.8 (0x00007f51e9e8b000)
> $ 

[...]

> It might be enough to change the libneon build dependency
> to libneon27-gnutls-dev.

I've tried that, it's not enough. But even if it was, libanjuta-subversion.so
links to libsvn_client-1.so.1, which links to libssl.so.0.9.8, so it would still
be a problem, right?

The plugin however says:

$ grep License plugins/subversion/anjuta-subversion.plugin.in
License=The subversion plugin includes cryptographic software written by Eric
Young (eay at cryptsoft.com).\nThe code of the plugin itself remains GPL licensed
and we hereby grant permission\n to link anjuta against OpenSSL.

None of the C files include such an exception though, so I'm not sure that's
enough. If it is, we can just put it in the copyright file, if it's not, we can
disable the subversion plugin and notify upstream about it, until it's fixed.

Do you know if that exception outside of the C code is enough?

Cheers,
Emilio

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnome-maintainers/attachments/20090731/f4096cc5/attachment.pgp>