On 12 July 2015 at 08:58, gil <puntogil(a)libero.it> wrote:
ApacheDS is not upgradable. Because, it and its dependencies
use not free org.osgi:org.osgi.core:6.0.0 (because
use OSGi Specification License  forbids modifications)
There are, also, some Secutity issues , of which it is not clear that
packages available will be affected.
CVE-2015-3250 apacheds-ldap-client: Timing Attack vulnerability
java-devel mailing list
AIUI the OSGi specification license covers the *specification* -- not
*implementations* of that specification.
If what you say is correct, then we would not be able to ship Eclipse.
Fortunately for us, the Eclipse Equinox implementation of the OSGi
specification is licensed under EPL.)