Bug#976991: closed by Ryan Tandy <ryan at nardis.ca> (Re: Bug#976991: Bug#1089629: Freeradius memory leak after upgrade to Debian 12)

[brian m. carlson]

On 2025-02-13 at 01:28:54, Ryan Tandy wrote:
> (CCing the git bug)
> 
> On Thu, Feb 13, 2025 at 12:37:01AM +0000, brian m. carlson wrote:
> > Since Git links against libcurl3t64-gnutls, it is now undistributable
> > since it's GPLv2 and OpenSSL is incompatibly licensed.
> 
> My understanding is that Debian now invokes the system library exception for
> OpenSSL and no longer considers this a problem.
> 
> https://meetbot.debian.net/debian-ftp/2020/debian-ftp.2020-03-13-20.02.html
> 
> Other packages also consider it as having resolved their GPL issues, e.g.
> <https://bugs.debian.org/924937>.
> 
> I hope I haven't misunderstood.
> 
> If you disagree with ftp-master about the system library exception, I have
> to ask you to take that up with them, or the TC.

Unfortunately, I don't agree.  I've contributed to a variety of GPLv2
software, including being a major copyright holder in Git, and I think
the language of the license is very clear that Debian cannot take
advantage of the system library exception due to co-distributing the
GPLv2 software and OpenSSL, including on the same ISO images.  This is
also the historical Debian position and the position of several Debian
contributors[0].

I think this is a serious license violation which definitely needs to be
fixed before trixie.

I'll address it with the ftp-masters.

[0] https://lists.debian.org/debian-devel/2005/11/msg00102.html and the
following thread
-- 
brian m. carlson (they/them or he/him)
Toronto, Ontario, CA
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 263 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-openldap-devel/attachments/20250213/96e37690/attachment.sig>