<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On 12 July 2015 at 08:58, gil <span dir="ltr"><<a href="mailto:puntogil@libero.it" target="_blank">puntogil@libero.it</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">hi<br>
ApacheDS is not upgradable. Because, it and its dependencies<br>
use not free org.osgi:org.osgi.core:6.0.0 (because<br>
use OSGi Specification License [1] forbids modifications)<br>
There are, also, some Secutity issues[2] , of which it is not clear that the<br>
packages available will be affected.<br>
regards<br>
gil<br>
<br>
[1]<a href="http://www.osgi.org/Main/OSGiSpecificationLicense" rel="noreferrer" target="_blank">http://www.osgi.org/Main/OSGiSpecificationLicense</a><br>
[2] <a href="https://bugzilla.redhat.com/show_bug.cgi?id=1241163" rel="noreferrer" target="_blank">https://bugzilla.redhat.com/show_bug.cgi?id=1241163</a><br>
CVE-2015-3250 apacheds-ldap-client: Timing Attack vulnerability<br>
--<br>
java-devel mailing list<br>
<a href="mailto:java-devel@lists.fedoraproject.org" target="_blank">java-devel@lists.fedoraproject.org</a><br>
<a href="https://admin.fedoraproject.org/mailman/listinfo/java-devel" rel="noreferrer" target="_blank">https://admin.fedoraproject.org/mailman/listinfo/java-devel</a></blockquote></div><br><br></div><div class="gmail_extra">AIUI the OSGi specification license covers the *specification* -- not *implementations* of that specification.<br><br>If what you say is correct, then we would not be able to ship Eclipse. Fortunately for us, the Eclipse Equinox implementation of the OSGi specification is licensed under EPL.)<br></div><div class="gmail_extra"><br>-- <br><div class="gmail_signature">Mat Booth<br><a href="http://fedoraproject.org/get-fedora" target="_blank">http://fedoraproject.org/get-fedora</a></div>
</div></div>