Bug#747031: python-debian imports hashlib, which pulls in openssl

Simon Fondrie-Teitler simonft at riseup.net
Sun May 4 21:29:23 UTC 2014


Package: python-debian
Version: 0.1.21+nmu2
Severity: serious
Tags: upstream
Justification: Policy 2.3

Dear Maintainer,

lib/debian/debian_support.py currently uses Python's hashlib library, which pulls in OpenSSL as described here:
https://docs.python.org/2/license.html#openssl

The GPL and the OpenSSL license are incompatible. See the following debian-legal thread for more information. 
https://lists.debian.org/debian-legal/2002/10/msg00113.html

Regards,
Simon Fondrie-Teitler

-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.13-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages python-debian depends on:
ii  python          2.7.5-5
ii  python-chardet  2.2.1-1
ii  python-six      1.6.1-1

Versions of packages python-debian recommends:
ii  python-apt  0.9.3.6

Versions of packages python-debian suggests:
ii  gpgv  1.4.16-1.1

-- debconf-show failed



More information about the pkg-python-debian-maint mailing list