[Buildroot] [PATCH 1/1] mariadb: security bump to version 10.1.23
Ryan Coe
bluemrp9 at gmail.com
Fri May 19 15:44:53 UTC 2017
Peter, All,
On 5/15/2017 6:51 AM, Peter Korsgaard wrote:
>>>>>> "Ryan" == Ryan Coe <bluemrp9 at gmail.com> writes:
> Hi,
>
> >> Thanks, I (obviously) want to apply this, but something odd is going on
> >> with the licensing. COPYING.LESSER has been removed by this commit:
> >>
> >> https://github.com/MariaDB/server/commit/577915def8
> >>
> >> But the client library IS listed as being LGPL:
> >>
> >> https://mariadb.com/kb/en/mariadb/mariadb-connector-c/
> >>
> >> And same for the "old" one:
> >>
> >> https://mariadb.com/kb/en/mariadb/lgpl-mysql-client-library-32358/
> >>
> >> Grepping around in the 10.1.23 tarball, I don't see a lot of references
> >> to Lesser og LGPL.
> >>
> >> Now, I know next to nothing about mariadb. Do you have any idea what is
> >> going on here?
> >>
> > I am really not sure what is going on there.
>
> :/
>
> Could you perhaps try to contact the mariadb developers?
>
Below is the response that I received on this issue:
https://jira.mariadb.org/browse/MDEV-12297
This is the full story:
* All MySQL code, including libmysqlclient, is GPLv2
* When implementing async API for libmysqlclient, we have licensed it
under LGPL. That's when COPYING.LESSER was added. Apparently someone
thought that having both COPYING and COPYING.LESSER means that the
project includes both GPL and LGPL components
* Then we got MDEV-12297, saying Github suddenly started showing MariaDB
license as LGPL
* Github uses a library "licensee" to detect the license, and it was a
recent bugfix in licensee to return "LGPL" when both COPYING and
COPYING.LESSER are present.
* Indeed,https://www.gnu.org/licenses/gpl-howto.html says that LGPL
licensed projects should have both files. So licensee and Github were
right.
* At that point in time we already have all async API code in
MariaDB Connector/C library (which is LGPL as a whole), so the
simplest solution was to remove COPYING.LESSER, basically relicensing
async API for libmysqlclient under GPLv2.
Practically it changes nothing.
MariaDB server was and is GPLv2, we cannot change that.
libmysqlclient library was and is GPLv2, we cannot change that.
MariaDB Connector/C was and is LGPLv2.1
More information about the buildroot
mailing list