Debian Bug report logs - #750867

kde-runtime: openssl license exception needed

Reported by: Pau Garcia i Quiles <pgquiles@elpauer.org> Date: Sat, 7 Jun 2014 19:18:01 UTC Severity: important Tags: jessie, sid, upstream Found in version kde-runtime/4:4.13.1-1 Done: Maximiliano Curia <maxy@debian.org> Bug is archived. No further changes may be made.

Toggle useless messages

Report forwarded to debian-bugs-dist@lists.debian.org, Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org> :

Bug#750867 ; Package src:kde-runtime . (Sat, 07 Jun 2014 19:18:06 GMT) (full text, mbox, link).

Acknowledgement sent to James Cowgill <james410@cowgill.org.uk> :

New Bug report received and forwarded. Copy sent to Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org> . (Sat, 07 Jun 2014 19:18:06 GMT) (full text, mbox, link).

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: James Cowgill <james410@cowgill.org.uk> To: Debian Bug Tracking System <submit@bugs.debian.org> Subject: kde-runtime: openssl license exception needed Date: Sat, 07 Jun 2014 20:15:16 +0100

Source: kde-runtime Version: 4:4.13.1-1 Severity: serious Tags: sid jessie Hi, The file /usr/lib/kde4/kio_sftp.so links against libssh which in turn links against openssl. Since the sftp code whichs links to libssh is licensed under the GPL, it needs a license exception to allow the linking. Alternatively you could prod bug #676650 which would provide an alternate libssh built against gnutls. See https://lists.debian.org/debian-legal/2004/05/msg00595.html James -- System Information: Debian Release: jessie/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing'), (100, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.14-1-amd64 (SMP w/4 CPU cores) Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash

Added tag(s) upstream. Request was from Maximiliano Curia <maxy@debian.org> to control@bugs.debian.org . (Sat, 12 Jul 2014 14:39:04 GMT) (full text, mbox, link).

Set Bug forwarded-to-address to 'https://bugs.kde.org/show_bug.cgi?id=337397'. Request was from Maximiliano Curia <maxy@debian.org> to control@bugs.debian.org . (Sat, 12 Jul 2014 14:39:08 GMT) (full text, mbox, link).

Added tag(s) pending. Request was from Maximiliano Curia <maxy@debian.org> to control@bugs.debian.org . (Thu, 07 Aug 2014 15:42:13 GMT) (full text, mbox, link).

Reply sent to Maximiliano Curia <maxy@debian.org> :

You have taken responsibility. (Sun, 24 Aug 2014 22:27:35 GMT) (full text, mbox, link).

Notification sent to James Cowgill <james410@cowgill.org.uk> :

Bug acknowledged by developer. (Sun, 24 Aug 2014 22:27:35 GMT) (full text, mbox, link).

Message #16 received at 750867-close@bugs.debian.org (full text, mbox, reply):

From: Maximiliano Curia <maxy@debian.org> To: 750867-close@bugs.debian.org Subject: Bug#750867: fixed in kde-runtime 4:4.14.0-1 Date: Sun, 24 Aug 2014 22:19:21 +0000

Source: kde-runtime Source-Version: 4:4.14.0-1 We believe that the bug you reported is fixed in the latest version of kde-runtime, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 750867@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Maximiliano Curia <maxy@debian.org> (supplier of updated kde-runtime package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 24 Aug 2014 23:26:40 +0200 Source: kde-runtime Binary: kde-runtime kdebase-runtime kde-runtime-data khelpcenter4 plasma-scriptengine-javascript kde-runtime-dbg kdebase-runtime-dbg Architecture: source amd64 all Version: 4:4.14.0-1 Distribution: unstable Urgency: medium Maintainer: Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org> Changed-By: Maximiliano Curia <maxy@debian.org> Description: kde-runtime - runtime components from the official KDE release kde-runtime-data - shared data files for the KDE base runtime module kde-runtime-dbg - debugging symbols for KDE base runtime module kdebase-runtime - Transitional package for the KDE runtime components kdebase-runtime-dbg - transitional package for kde-runtime-dbg khelpcenter4 - help center plasma-scriptengine-javascript - JavaScript script engine for Plasma Closes: 750867 Changes: kde-runtime (4:4.14.0-1) unstable; urgency=medium . * Disable libssh build-dep, due to openssl license incompatibility. (Closes: #750867) * Update install files. * New upstream release. Checksums-Sha1: f45c40f2bb5e5e401ab297553868be49bff939e3 3293 kde-runtime_4.14.0-1.dsc 3847a9e6a66e4e724cff9230ff564c900243d4cd 7864060 kde-runtime_4.14.0.orig.tar.xz 75d8a380cba52c69a94febd92237815a0eb2aa59 29488 kde-runtime_4.14.0-1.debian.tar.xz 96f671859613b10f01c03341360cecb3d9326003 1847692 kde-runtime_4.14.0-1_amd64.deb 6e4ae32fbd6a0ed7e6c7656b6404907f84e8b652 19454 kdebase-runtime_4.14.0-1_all.deb 054007e84dce22a0c33da11d3cf7ac31239fe53d 6939314 kde-runtime-data_4.14.0-1_all.deb 27ae5651337f6ce7737b469629e7f284a3dbdb35 339340 khelpcenter4_4.14.0-1_amd64.deb 17b2965df49793505fdc04f75acc138de78179fa 404202 plasma-scriptengine-javascript_4.14.0-1_amd64.deb 035af1193ea890ebd66e7de99a60ad5d71a36d95 35595628 kde-runtime-dbg_4.14.0-1_amd64.deb 25c57f52a44e2e8930afc3a0329687cad0af4c16 19198 kdebase-runtime-dbg_4.14.0-1_all.deb Checksums-Sha256: 26e8e1c00d2358329982893456957a55476e033d88f097fbd2d3a5e41c5a0afa 3293 kde-runtime_4.14.0-1.dsc 3c3c20525b7be7b5d7babc1c8bf75e51217b1b7a7312bbf3a8b7a78800858763 7864060 kde-runtime_4.14.0.orig.tar.xz 9ed6fb59c6e6c25b85fb88aa063ef8e790748b27eb4073d2e1e245939474b484 29488 kde-runtime_4.14.0-1.debian.tar.xz dbf65af813693459b281da1d5ceb6e8247927208a8b94eef0dfdfd1b176540c3 1847692 kde-runtime_4.14.0-1_amd64.deb 53b262f349e21f9dc8269251a35b6c025f3c587d92c62c1a04a0958db7db8745 19454 kdebase-runtime_4.14.0-1_all.deb 024efbb9260891227823802bd18a94ebd0001d8030c6b43f1f6bf4e82f52c95b 6939314 kde-runtime-data_4.14.0-1_all.deb 79f25c6fccc1e9c13f62b1be144672024a9c9eeb0c3a60ea7bb0f99243d64cf2 339340 khelpcenter4_4.14.0-1_amd64.deb 6d9010252edd381086ca7a98e5c9abd8a854e86bb6026921c6713dd20c5a25a9 404202 plasma-scriptengine-javascript_4.14.0-1_amd64.deb d35a79a7ade7e8f7bb6999df4cd2848d4db3804273ec6afc89a35cb2dd1ea61f 35595628 kde-runtime-dbg_4.14.0-1_amd64.deb 6759eae3b0020d0618dc98e68f0e4c0ab45358fadfb51351d162c715e22dc0d2 19198 kdebase-runtime-dbg_4.14.0-1_all.deb Files: 306b6c840f17a4797f751027bd81ccd6 1847692 kde optional kde-runtime_4.14.0-1_amd64.deb 4c4e7ed10fc85b8ac8607cf4015ab8cf 19454 oldlibs extra kdebase-runtime_4.14.0-1_all.deb fb84f5589d149adab26f5a5c2ecf3d48 6939314 kde optional kde-runtime-data_4.14.0-1_all.deb a916245f426418c1c8cc2435f5d1f646 339340 kde optional khelpcenter4_4.14.0-1_amd64.deb 752308324d00e66f6d88757995125cfa 404202 kde optional plasma-scriptengine-javascript_4.14.0-1_amd64.deb 3edb3c5bde56f1aca8705c521ee01099 35595628 debug extra kde-runtime-dbg_4.14.0-1_amd64.deb 6cd3614fab1cc7acc79beb930f2711bc 19198 oldlibs extra kdebase-runtime-dbg_4.14.0-1_all.deb 72df7f104af75577a80f5b55af36272e 3293 kde optional kde-runtime_4.14.0-1.dsc 33ecc0c53bd62700b0dfefe93474baf5 7864060 kde optional kde-runtime_4.14.0.orig.tar.xz 9f295358937960930a0e783453ebab01 29488 kde optional kde-runtime_4.14.0-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJT+mJcAAoJEMcZdpmymyMqsSEQAJVYhiYBjIA66m75smPZtdsh sRPlEkmtR6+b+LU9+X+2jSGlBBLGQaK2+5pDrLl4xZ1TOSqE3NkphpcCYAykaLVP YqaqIHjNCymZYRwv32Y1ap7pqcnKGz7l+hbtQiyRXKOF4gHSxg910K9PtFVsTQ2/ IJ8Va0LpvWqyBV+2aozG4Es8qixrjZ7dJt3hRltkCxzNUP3FPz7wB5jwd2U5vGLE uM0+pwVikjKEacSLY3hLgVHqPUb1s9990AJAfxcHiiw2Hz919J3UcdNrzPSA3gPE yKWasclKw11csXn99jsS6jCZfGwkWUGul7oBNO9qTI9ZOAhyBaQKaGpRaP8EasD/ L1RwkZHYRxcbuo+vCk+1+GC9V5fLVtwKVmDl+dKKi5MUhL0uIF0jlU9mIDxkP6hf ctgLX3hV+ueMGgirpL76SH7Lx8VpAmJ7mJuPvJV17+Z7obRMdqg6WQ+SkqL0nUQx kgtFVssQft1cktcEOE98R9bHE024SZFN8YBGpu4OechSW42qQ5ni2y6CBdRsQGru kJI+IPaQ+YT4D9BchgifIKBMfpatxzOAcPWSpcOUZxejU+vo5qzIeeoPKJnfzFw9 OFGdl3GahKlpe5kCG8K07mPYK7TdECIEGvc2TnLpuQfb8V/XdC60x0KgGL5sLgtK hdWN9LtIqqz4rQWfDrRW =VKr9 -----END PGP SIGNATURE-----

Bug reopened Request was from Pau Garcia i Quiles <pgquiles@elpauer.org> to control@bugs.debian.org . (Thu, 28 Aug 2014 21:12:04 GMT) (full text, mbox, link).

Changed Bug submitter to 'Pau Garcia i Quiles <pgquiles@elpauer.org>' from 'James Cowgill <james410@cowgill.org.uk>' Request was from Pau Garcia i Quiles <pgquiles@elpauer.org> to control@bugs.debian.org . (Thu, 28 Aug 2014 21:12:05 GMT) (full text, mbox, link).

No longer marked as fixed in versions kde-runtime/4:4.14.0-1. Request was from Pau Garcia i Quiles <pgquiles@elpauer.org> to control@bugs.debian.org . (Thu, 28 Aug 2014 21:12:06 GMT) (full text, mbox, link).

Information forwarded to debian-bugs-dist@lists.debian.org, Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org> :

Bug#750867 ; Package src:kde-runtime . (Thu, 28 Aug 2014 21:21:04 GMT) (full text, mbox, link).

Acknowledgement sent to Pau Garcia i Quiles <pgquiles@elpauer.org> :

Extra info received and forwarded to list. Copy sent to Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org> . (Thu, 28 Aug 2014 21:21:04 GMT) (full text, mbox, link).

Message #27 received at 750867@bugs.debian.org (full text, mbox, reply):

From: Pau Garcia i Quiles <pgquiles@elpauer.org> To: 750867@bugs.debian.org Date: Thu, 28 Aug 2014 23:19:24 +0200

I think the resolution of this bug is wrong kdelibs is under LGPL libssh is under LGPL Linking LGPL v2.1 to OpenSSL does not require an exception according to Debian Legal: https://lists.debian.org/debian-legal/2008/06/msg00007.html More information at the KDE Bug Tracker: https://bugs.kde.org/show_bug.cgi?id=337397 Please revert

Unset Bug forwarded-to-address Request was from Pau Garcia i Quiles <pgquiles@elpauer.org> to control@bugs.debian.org . (Fri, 29 Aug 2014 08:27:05 GMT) (full text, mbox, link).

Information forwarded to debian-bugs-dist@lists.debian.org, Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org> :

Bug#750867 ; Package src:kde-runtime . (Fri, 29 Aug 2014 08:42:05 GMT) (full text, mbox, link).

Acknowledgement sent to Pau Garcia i Quiles <pgquiles@elpauer.org> :

Extra info received and forwarded to list. Copy sent to Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org> . (Fri, 29 Aug 2014 08:42:05 GMT) (full text, mbox, link).

Message #34 received at 750867@bugs.debian.org (full text, mbox, reply):

From: Pau Garcia i Quiles <pgquiles@elpauer.org> To: 750867@bugs.debian.org Date: Fri, 29 Aug 2014 10:38:51 +0200

Here you can see kio-sftp is under LGPL http://quickgit.kde.org/?p=kde-runtime.git&a=blob&f=kioslave%2Fsftp%2Fkio_sftp.cpp

Severity set to 'important' from 'serious' Request was from Pau Garcia i Quiles <pgquiles@elpauer.org> to control@bugs.debian.org . (Fri, 29 Aug 2014 17:42:29 GMT) (full text, mbox, link).

Reply sent to Maximiliano Curia <maxy@debian.org> :

You have taken responsibility. (Fri, 29 Aug 2014 20:24:09 GMT) (full text, mbox, link).

Notification sent to Pau Garcia i Quiles <pgquiles@elpauer.org> :

Bug acknowledged by developer. (Fri, 29 Aug 2014 20:24:10 GMT) (full text, mbox, link).

Message #41 received at 750867-done@bugs.debian.org (full text, mbox, reply):

From: Maximiliano Curia <maxy@debian.org> To: 750867-done@bugs.debian.org, James Cowgill <james410@cowgill.org.uk>, Pau Garcia i Quiles <pgquiles@elpauer.org>, Laurent Bigonville <bigon@debian.org> Cc: debian-legal@lists.debian.org Subject: Re: kde-runtime: openssl license exception needed Date: Fri, 29 Aug 2014 22:20:53 +0200

Hi, After some discussion on #debian-devel, there seemed to be consensus that the LGPL doesn't conflict with the openssl license. Personally, I think this is not the case (the conflicting point 6 in the GPL is verbatim copied in LGPL as point 10), but as long as debian-legal is ok with the consensus I'm ok with it. (I'm ccing the debian-legal ml to receive some input if this is not ok). From the bug management side, this bug should either stay closed because the sftp plugin isn't installed anymore or because it was an invalid request. Whatever the case, it shouldn't be reopened, so I'm closing this bug now. Discussing new issues on old bugs tends to get messy, for this case, where it is not clear what the bug actually is, we would prefer to discuss it through the debian-qt-kde@lists.debian.org ml. Readding the sftp plugin should be done in #759254 together with the next release. Happy hacking, -- "Don't let what you cannot do interfere with what you can do." -- Wooden's Rule Saludos /\/\ /\ >< `/

Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org . (Sat, 27 Sep 2014 07:34:26 GMT) (full text, mbox, link).

Send a report that this bug log contains spam.