Bug#879984: libgcrypt20: copyright does not mention OCB patent license

Jan Kiszka jan.kiszka at siemens.com
Mon Nov 6 06:31:49 UTC 2017


On 2017-11-03 19:28, Andreas Metzler wrote:
> On 2017-11-03 Jan Kiszka <jan.kiszka at siemens.com> wrote:
>> Has this topics also been brought up upstream already? Didn't find a
>> reference so far.
> 
> No, I have not yet done so. The OCB licenses is listed in GIT's LICENSES
> file, it is just not listed in EXTRA_DIST and therefore missing in the
> tarball.
> 
> Re Debian I think we 'll just need to update the copyright file, there
> are multiple OCB implementatios in Debian/main and some are using the
> genneric opensource license grant.
> 
> cu Andreas
> 

I think, and I've heard this from other sides as well, that the problems
is not just a missing OCB license listing: Adding code under this
license to the library seems to effectively downgrade the lib from LGPL
to GPL. So it has impact on the top-level license - and likely some users.

Would be good to sort this out prior to making the new version part of a
stable release. Therefore my question if upstream is aware of this
already (and maybe has some comments).

Thanks,
Jan



More information about the Pkg-gnutls-maint mailing list