Bug 48363 - Incompatible GPL license in saml/php-krb5/
Incompatible GPL license in saml/php-krb5/
Status: NEW
Product: UCS
Classification: Unclassified
Component: SAML
UCS 4.4
Other Linux
: P5 normal (vote)
: ---
Assigned To: UCS maintainers
UCS maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2018-12-17 17:03 CET by Philipp Hahn
Modified: 2022-01-05 13:44 CET (History)
1 user (show)

See Also:
What kind of report is it?: Development Internal
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional): License
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Philipp Hahn univentionstaff 2018-12-17 17:03:14 CET
saml/php-krb5 seems to be a mix of GPL-2 + GPL-2+ + GPL-3+ + Expat, which is AFAIK incompatible with out AGPL: <https://en.wikipedia.org/wiki/Affero_General_Public_License#Compatibility_with_the_GPL>
Comment 1 Philipp Hahn univentionstaff 2018-12-17 21:42:57 CET
The source also contains build artifacts:
    Bug #48363,Bug #28499 license: php-krb5
    
    Expat + GPL-2 + GPL-2+ + GPL-3+ + AGPL-3.0
    
    Remove build artifacts from source code repository.

146     21      saml/php-krb5/debian/copyright
-       -       saml/php-krb5/src/.libs/gssapi.o
0       41      saml/php-krb5/src/.libs/krb5.la
0       41      saml/php-krb5/src/.libs/krb5.lai
-       -       saml/php-krb5/src/.libs/krb5.o
-       -       saml/php-krb5/src/.libs/krb5.so
-       -       saml/php-krb5/src/.libs/negotiate_auth.o
0       14168   saml/php-krb5/src/autom4te.cache/output.0
0       79      saml/php-krb5/src/autom4te.cache/requests
0       433     saml/php-krb5/src/autom4te.cache/traces.0
1       3       saml/php-krb5/src/build/shtool
Comment 3 Philipp Hahn univentionstaff 2022-01-05 13:44:12 CET
debian/copyright is out-of-date since Bug #51472: MIT Expat only

[5.0-1] 812ec3d56b doc[php-krb5]: Update debian/copyright
 saml/php-krb5/debian/copyright | 98 +-------------------------------------------------------------
 1 file changed, 1 insertion(+), 97 deletions(-)

Should be okay with AGPL-3.0-only