Bug#1034358: libvncclient1: license conflict with libsasl2

[Bastian Germann <bage@debian.org>]

Package: libvncclient1
Version: 0.9.14+dfsg-1
Severity: serious

Hi,

libvncclient1 depends on libsasl2-2, which is licensed under CMU's BSD-3-Clause-Attribution license and covered by the 
RSA-MD license. They have clauses in place, which are known to be incompatible with GPL (libvncclient1's license).
There are several possible solutions to this problem:

1) Build without SASL support. The affected symbols GetTLSCipherBits, HandleSASLAuth, and ReadFromSASL are not used by 
any of the reverse dependencies.

2) Support my request at #996892.

3) Ask upstream to add a license exception for libsasl2-2, similar to the one that was required by Debian for OpenSSL
for a long time.

Thanks for your consideration,
Bastian