On 29/03/17 15:58, Dmitry Alexandrov wrote: >> On 26/03/17 01:01, Walter Landry wrote: >>> Florian Weimer <fw@deneb.enyo.de> wrote: >>>>> #5 Declare GMP to be a system library. >>>>> >>>> (snip) >>>> >>>>> #5 was how Fedora looked at the OpenSSL library issue. Since Debian >>>>> has another viewpoint on OpenSSL I somehow doubt we would use it for >>>>> GMP. >>>> >>>> I would like to suggest to treat more libraries as eligible for the >>>> system library exception within Debian. >>> >>> The traditional interpretation as I understand it is that nothing >>> Debian ships qualifies for the the system exception. This is because >>> Debian ships everything together, and the system exception only >>> applies for components that do not accompany the executable. >>> >> >> Debian ships everything together? Really? > > Yes. http://cdimage.debian.org/debian-cd/current/amd64/iso-dvd/ > > I don't see there an image named debian-8.7.1-amd64-DVD-X_free-but-GPL-incompatible.iso So... does this means that we are actually *now* shipping OpenSSL with GPL software on the same DVD? How do you propose we fix this?
Attachment:
signature.asc
Description: OpenPGP digital signature