On Sun, Dec 11, 2022 at 08:46:07PM +0100, Andreas Radke wrote:
I have noticed freswa has bumped BerkeleyDB to v6 (again) and started pushing rebuilds to staging repo.
I've checked every affected package for it's license: 389-ds-base: GPLv3+ https://github.com/389ds/389-ds-base/blob/main/LICENSE.GPLv3%2B apr-util Apache 2.0 https://github.com/apache/apr/blob/trunk/LICENSE bogofilter GPLv2 and v3 mixed https://gitlab.com/bogofilter/bogofilter/-/blob/main/bogofilter/COPYING dsniff BSD https://github.com/tecknicaltom/dsniff/blob/master/LICENSE evolution-data-server LGPLv2 All source files contain "under the terms of the GNU Lesser General Public License" COPYING file contains GPLv2: https://gitlab.gnome.org/GNOME/evolution-data-server/-/blob/master/COPYING gnucobol GPLv3 and LGPLv3 https://sourceforge.net/p/gnucobol/code/HEAD/tree/trunk/README https://sourceforge.net/p/gnucobol/code/HEAD/tree/trunk/COPYING inn INN, GPLv2+, Public Domain, BSD, BSD-2, MD5 https://github.com/InterNetNews/inn/blob/main/LICENSE iproute2 GPLv2 https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/tree/COPYING isync GPLv2+ All src files contain "the Free Software Foundation; either version 2 of the License, or (at your option) any later version." https://sourceforge.net/p/isync/isync/ci/master/tree/LICENSES/GPL-2.0-or-lat... jack2 linux subfolder: LGPLv2.1 and GPLv2+ dbus subfolder: GPLv2 jack2-dbus doesn't link against libdb, only libjackserver.so and libjack.so do. => Linking happends between LGPLv2.1 and AGPLv3 src: https://github.com/jackaudio/jack2 jnettop GPLv2 Main homepage seems to be down, but there are mirrors, for example: https://github.com/jwilk-mirrors/jnettop/blob/trunk/COPYING libical MPL or LGPL2.1 https://github.com/libical/libical/blob/master/COPYING neomutt GPLv2+, GPLv3 See src files. https://github.com/neomutt/neomutt/blob/main/LICENSE.md opendkim BSD and sendmail https://github.com/trusteddomainproject/OpenDKIM/blob/master/LICENSE https://github.com/trusteddomainproject/OpenDKIM/blob/master/LICENSE.Sendmai... perl GPLv1+ https://github.com/Perl/perl5/blob/blead/README perl-berkeleydb Perl https://metacpan.org/pod/BerkeleyDB php PHP https://github.com/php/php-src/blob/master/LICENSE php7 PHP https://github.com/php/php-src/blob/master/LICENSE postfix EPL https://de.postfix.org/ftpmirror/index.html python-bsddb BSD-3 https://github.com/underrun/pybsddb/blob/master/LICENSE.txt reprepro GPLv2 https://salsa.debian.org/debian/reprepro/-/blob/debian/COPYING skktools GPLv2+ and GPLv3 See src files here: http://openlab.ring.gr.jp/skk/tools/ License: http://openlab.jp/skk/skk/main/READMEs/COPYING squid GPLv2+ See src files. https://github.com/squid-cache/squid/blob/master/COPYING subversion Apache2 swi-prolog BSD https://github.com/SWI-Prolog/swipl-devel/blob/master/LICENSE As far as I understand, the main concern is linking GPLv2 against AGPLv3. Thus I'd propose to create db5.3 for the GPLv2 only projects: bogofilter iproute2 jnettop reprepro Best regards, Frederik