[pkg-db-devel] Bug#781011: libdb5.3 license problem

[Kouta Ikematsu]

Package: libdb5.3
Serverity: serious

Hello.

libdb5.3 is included "licensed under Artistic license" code. no version elected.

Note: If this license is Artistic License "Version 2", This is not problem. (Artistic License 2.0 is FSF-Free, GPL compatible.)


FileList:

src/crypto/mersenne/mt19937db.c



This code is DFSG-Free, but not FSF-Free, and GPL incompatible.

This library used GPL'ed software. (E,g jigdo, etc...) It is non-free, GPL incompatible. (See Summary)
 
And, Not display this code's copyright statement. (missing copyright file)


Summary:

"SleepyCat License code + Artistic License (Version 1.0) or FSF non-free code + GPL code => Not OK (GPL incompatible)" 

"SleepyCat License code + Artistic Licence (Version 2.0) code + GPL code => OK (GPL compatible)" 

"SleepyCat License code + GPL or GPL compatible license code + GPL code  => OK (GPL compatible)"

(Note: GPL code is no exception, default GPL licensed code.)


Suggests:

1. Remove GPL problematic code, and rebuild. and add copyright file.

2. Replace GPL compatible code,　and rebuild. and add copyright file.

3. Contact Upstream author.

4. Remove Debian archive.



Reference:

https://bugzilla.redhat.com/show_bug.cgi?id=886838
https://lists.debian.org/debian-devel/2013/07/msg00140.html
https://www.gnu.org/philosophy/license-list.html#ArtisticLicense
https://www.gnu.org/philosophy/license-list.html#ArtisticLicense2
https://wiki.debian.org/DFSGLicenses#The_Artistic_License