#764938 RM: ssdeep/all suites -- ROM; non-distributable

Package:
snapshot.debian.org
Source:
snapshot.debian.org
Submitter:
Helmut Grohne
Date:
2014-11-02 18:33:04 UTC
Severity:
normal
#764938#5
Date:
2014-10-08 15:19:54 UTC
From:
To:
Thorsten Alteholz pointed (#764357) out that ssdeep contains source from
trn, which is licensed under a non-commercial license. It therefore is
not DFSG free. What makes matters bad is that it links non-commercial
source with GPL source (in libfuzzy2). Thus the resulting binaries
become non-distributable.

Helmut
#764938#14
Date:
2014-11-02 18:31:01 UTC
From:
To:
For snapshot removal:

Only packages with versions older than 2.12 are affected, but even e.g.
1.1-2 is clearly affected.

 * Binary packages built from ssdeep need to be removed due to the GPL
   violation.

 * ssdeep sources (prior to 2.12) contain non-commercial bits and are
   thus not DFSG free but they are distributable.

So if snapshot can contain non-DFSG free packages, only binary packages
need to be removed.

Helmut