[Buildroot] [PATCH 1/1] mariadb: security bump to version 10.1.23

Ryan Coe bluemrp9 at gmail.com
Fri May 19 15:44:53 UTC 2017


Peter, All,


On 5/15/2017 6:51 AM, Peter Korsgaard wrote:
>>>>>> "Ryan" == Ryan Coe <bluemrp9 at gmail.com> writes:
> Hi,
>
>   >> Thanks, I (obviously) want to apply this, but something odd is going on
>   >> with the licensing. COPYING.LESSER has been removed by this commit:
>   >>
>   >> https://github.com/MariaDB/server/commit/577915def8
>   >>
>   >> But the client library IS listed as being LGPL:
>   >>
>   >> https://mariadb.com/kb/en/mariadb/mariadb-connector-c/
>   >>
>   >> And same for the "old" one:
>   >>
>   >> https://mariadb.com/kb/en/mariadb/lgpl-mysql-client-library-32358/
>   >>
>   >> Grepping around in the 10.1.23 tarball, I don't see a lot of references
>   >> to Lesser og LGPL.
>   >>
>   >> Now, I know next to nothing about mariadb. Do you have any idea what is
>   >> going on here?
>   >>
>   > I am really not sure what is going on there.
>
> :/
>
> Could you perhaps try to contact the mariadb developers?
>
Below is the response that I received on this issue:

https://jira.mariadb.org/browse/MDEV-12297

This is the full story:

* All MySQL code, including libmysqlclient, is GPLv2
* When implementing async API for libmysqlclient, we have licensed it
   under LGPL. That's when COPYING.LESSER was added. Apparently someone
   thought that having both COPYING and COPYING.LESSER means that the
   project includes both GPL and LGPL components
* Then we got MDEV-12297, saying Github suddenly started showing MariaDB
   license as LGPL
* Github uses a library "licensee" to detect the license, and it was a
   recent bugfix in licensee to return "LGPL" when both COPYING and
   COPYING.LESSER are present.
* Indeed,https://www.gnu.org/licenses/gpl-howto.html  says that LGPL
   licensed projects should have both files. So licensee and Github were
   right.
* At that point in time we already have all async API code in
   MariaDB Connector/C library (which is LGPL as a whole), so the
   simplest solution was to remove COPYING.LESSER, basically relicensing
   async API for libmysqlclient under GPLv2.

Practically it changes nothing.
MariaDB server was and is GPLv2, we cannot change that.
libmysqlclient library was and is GPLv2, we cannot change that.
MariaDB Connector/C was and is LGPLv2.1



More information about the buildroot mailing list