• Bug#1109121: rsyslog: tainted by =?UTF-8?Q?=E2=80=9CAI=E2=80=9D?=

    From Thorsten Glaser@21:1/5 to All on Fri Jul 11 21:20:01 2025
    Source: rsyslog
    Version: 8.2504.0-1
    Severity: serious
    Justification: code and/or documentation probably non-free

    Our friends from Gentoo have uncovered this:

    https://social.treehouse.systems/@mgorny/114835815375250264

    In the linked-to article, the rsyslog author admits to having
    used so-called “AI” over the past 24 (!) months. This means that
    the code and/or documentation in recent releases is very likely
    non-free, as it’s created by mechanically transforming existing
    works without honouring their licences, and without even the
    possibility of auditing.

    This makes recent releases of rsyslog not suitable for main,
    especially not as default syslogd implementation.

    I recognise that this short before the trixie release is a bad
    timing, but the author of rsyslog admits at having done this
    underhandedly hidden for the last two years, so…

    ----

    Personally, I’ve been happy with inetutils-syslogd, and, given
    that many people would use systemd-journald’s features these days
    anyway, it inetutils-syslogd probably makes for a better choice
    as default syslogd implementation in Debian, forwarded to from
    systemd-journald on systems using that (AIUI not even by default
    any more). People who do rely on rsyslog can then install it from
    non-free after initial system setup.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)