legal November 2016

legal@lists.fedoraproject.org

10 participants
7 discussions

Sleepycat license with SaaS restriction
by Florian Weimer 08 Jul '25

08 Jul '25

cryptlib is licensed under the Sleepycat license with a SaaS restriction: “Note that decoupling the software from the user, for example by running in a SaaS configuration, does not exempt you from these requirements.” (Full text attached.) This was not part of the original Sleepycat license, so a new license tag is required. Maybe this license is not even free; this additional clause seems to be a restriction on use. But perhaps it is not so different from the AGPL. Thanks, Florian

6 8

Henry Spencer's license
by Petr Šabata 06 Mar '23

06 Mar '23

Dear legal, While checking the contents of our `perl' package, I noticed the following: (...) /* NOTE: this is derived from Henry Spencer's regexp code, and should not * confused with the original package (see point 3 below). Thanks, Henry! */ /* Additional note: this code is very heavily munged from Henry's version * in places. In some spots I've traded clarity for efficiency, so don't * blame Henry for some of the lack of readability. */ /* The names of the functions have been changed from regcomp and * regexec to pregcomp and pregexec in order to avoid conflicts * with the POSIX routines of the same names. */ (...) * pregcomp and pregexec -- regsub and regerror are not used in perl * * Copyright (c) 1986 by University of Toronto. * Written by Henry Spencer. Not derived from licensed software. * * Permission is granted to anyone to use this software for any * purpose on any computer system, and to redistribute it freely, * subject to the following restrictions: * * 1. The author is not responsible for the consequences of use of * this software, no matter how awful, even if they arise * from defects in it. * * 2. The origin of this software must not be misrepresented, either * by explicit claim or by omission. * * 3. Altered versions must be plainly marked as such, and must not * be misrepresented as being the original software. * **** Alterations to Henry's code are... **** **** Copyright (C) 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, **** 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008 **** by Larry Wall and others **** **** You may distribute under the terms of either the GNU General Public **** License or the Artistic License, as specified in the README file. (...) You can see the whole file here: https://metacpan.org/source/SHAY/perl-5.20.1/regexec.c I looked but couldn't find any common name for this license of Henry's. Is it on our list? Is it free? What name should I use in the License tag? Thank you, Petr

5 9

MP3 status?
by Eric Smith 13 Nov '16

13 Nov '16

About three hours ago on Twitter @spotrh tweeted: "As of today, MP3 decoding software is permissible in Fedora." Is this true? If so, could we have a bit more detail? I'm slightly suspicious as to the authenticity of the tweet because yesterday @spotrh tweeted: "I'm going to stay off social media for the foreseeable future. If you need me, you know how to find me." There are MP3-related US patents with expirations in September 2015, February 2017, April 2017, and December 2017, and some people argue that the last one affecting decoding may have been the one that expired in September 2015, but I don't know of anything that changed in 2016.

8 19

Re: MP3 status?
by Joshua J. Cogliati 13 Nov '16

13 Nov '16

I am speaking as an individual and am not a lawyer. On 11/11/2016 02:32 PM, Yaakov Selkowitz wrote: >Also, for the sake of clarity, what is the status of: >* MPEG-1 Audio Layer II (MP2) encoding (e.g. twolame)? >* MPEG-1 video decoding (e.g. smpeg, which also includes MP3 decoding)? These are probably patent free, just by virtue of age. As in patents in the US have to be filed within one year of the technique being published, and last 20 years after filing, or for patents filed before June 8, 1995, can last 17 years after the grant date. There is the possibility of patent term extension if the patent office takes too long to process the paperwork. ISO 11172-2 which defines MPEG-1 video decoding came out in 1993-08-01 (August 8, 1993) ISO 11172-3 which defines MPEG-1 audio decoding (including Layer II) came out in 1993-08-01 (August 8, 1993) So, doing the math, 1993+1+20 = 2014 (1993 + 1 year after publication + 20 years to expire) and 1995 + 3 + 17 = 2015 (1995 + 3 years to get patent granted + 17 years to expire) so patents on anything in ISO 11172 are highly likely to be expired. I have some more detail on this at: http://www.osnews.com/story/24954/US_Patent_Expiration_for_MP3_MPEG-2_H_264 That said, the rest of MPEG-1 is much less common than MPEG-1 layer III audio, so there is much less research in this part. (Also, the last time I saw a new MPEG-1 video was in 2009, so the format is not getting used much.) >Oh, and also: >* MPEG-2 video decoding (e.g. libmpeg2)? Rob Glidden looked at this in 2011, and his conclusion at the time was that the last MPEG-2 patent he was aware of expired on 2018-Feb-14th. He posted about this, but the links to the spreadsheets are broken (but he has been emailed about the url problems, so hopefully it gets fixed soon.) http://robglidden.com/2011/12/08/half-of-mpeg-2-patents-expire-in-2012/ So MPEG-2 is still probably patented, but this is worth looking at in 2018. Joshua Cogliati

1 0

Re: legal Digest, Vol 110, Issue 2
by Joshua J. Cogliati 11 Nov '16

11 Nov '16

Tom, Let me say that I am pleased to hear that. Just for clarification, is this MPEG-1 Layer III audio decoding only, or does is it also include MPEG-2 Layer III audio decoding? (Some implementations include both.) Josh >We cannot comment on specific patents, not now, not ever. Red Hat has >determined that it is now acceptable for Fedora to include MP3 decoding >functionality (not specific to any implementation, or binding by any >unseen agreement). Encoding functionality is not permitted at this time.

2 1

Re: MP3 status?
by Joshua J. Cogliati 11 Nov '16

11 Nov '16

First of all, I am not a lawyer, but I have talked to lawyers, but finding a lawyer who is willing to be quoted publicly without paying them is difficult. There are several things that can be meant went saying MP3 decoding because there are several things that MP3 can be. The MPEG-1 specification was publish in 1993 as ISO/IEC 11172. It include both video and audio codecs. Most of the MP3 files I have seen on the internet are MPEG-1 layer III audio. The linux file command will identify these as: MPEG ADTS, layer III, v1 The MPEG-2 specification also had layer III audio. The linux file command will identify these as: MPEG ADTS, layer III, v2 There is also a non-ISO MP3 file format that is called MPEG-2.5 created by Fraunhofer IIS. Now for patent status. MPEG-1 Layer III audio decoding is possible to do patent free in the US as of September 2015 assuming you do decoding in roughly the way described in the MPEG-1 specification. MPEG-1 Layer III audio encoding is probably possible to do patent free. That said there are patents that can apply to the encoding that expire in the 2017 timeframe. See for example US patent 6009399. MPEG-2 Layer III audio decoding and encoding may be patented or not. Many of the MPEG-2 patents don't expire until 2018, so it would take some work to determine if MPEG-2 Layer III can be decoded or encoded patent free. MPEG-2.5 is still patented for decoding and encoding and will be till at least 2017. The patents that Eric Smith is referring to that expire in February 2017 and April 2017 are by Sisvel and I believe they are U.S. Patent 5,878,080 <https://www.google.com/patents/US5878080>, which expires February 2017, U.S. Patent 5,850,456 <https://www.google.com/patents/US5850456>, which expires February 2017 and U.S. Patent 5,960,037 <https://www.google.com/patents/US5960037>, which expires 9. April 2017. These were filed in 1997 so it is highly unlikely that they read on MPEG-1 Layer III audio decoding since the MPEG-1 specification was publish in 1993 (and therefore the patents would not be valid against MPEG-1 since the filing date is more than 1 year after the specification was published). The patent that 'expires' in December 2017 I believe is U.S. Patent 5,703,999 <https://www.google.com/patents/US5703999> but I think that actually expired in 2014/12/30 (17 years after grant date of December 30, 1997) because it was filed November 18, 1996 but is a continuation of a PCT/DE93/00448 filed in May 18, 1993. Redhat lists this as expiring in November 18, 2016 (Possibly this November 2016 date is why MPEG-1 Layer III audio decoding is only happening now, instead of last year). (See also my previous email: https://lists.fedoraproject.org/pipermail/devel/2015-November/216662.html ) So an MPEG-1 Layer III decoding program can probably be used patent free. Joshua Cogliati > Date: Thu, 10 Nov 2016 14:55:06 -0700 > From: Eric Smith <spacewar(a)gmail.com> > Subject: [Fedora-legal-list] MP3 status? > To: legal(a)lists.fedoraproject.org > Message-ID: > <CAFrGgTS=c=PKDj0zmuhEyQT0B8EzFUyenzn7qB-kxNK3qiP4_Q(a)mail.gmail.com> > Content-Type: multipart/alternative; > boundary=001a1144847a2ece3d0540f96d05 > > --001a1144847a2ece3d0540f96d05 > Content-Type: text/plain; charset=UTF-8 > > About three hours ago on Twitter @spotrh tweeted: > "As of today, MP3 decoding software is permissible in Fedora." > > Is this true? If so, could we have a bit more detail? > > I'm slightly suspicious as to the authenticity of the tweet because > yesterday @spotrh tweeted: > "I'm going to stay off social media for the foreseeable future. If you > need me, you know how to find me." > > There are MP3-related US patents with expirations in September 2015, > February 2017, April 2017, and December 2017, and some people argue that > the last one affecting decoding may have been the one that expired in > September 2015, but I don't know of anything that changed in 2016. >

1 0

Fwd: Trilinos license
by Antonio Trande 04 Nov '16

04 Nov '16

-------- Forwarded Message -------- Subject: Trilinos license Date: Fri, 4 Nov 2016 15:00:13 +0100 From: Antonio Trande <sagitter(a)fedoraproject.org> To: legal(a)fedoraproject.org Hello. I wish to review RPMs of Trilinos software (bz#1391958) for Fedora/EPEL but i need clarifications about legitimacy of its license: License Trilinos is an open source software project. Most Trilinos source code, including the code developed at Sandia National Laboratories, is licensed either LGPL or BSD. Some contributions have alternative licensing (see below). Trilinos is currently working toward BSD-compatible licensing for all packages. BSD-Compatible Packages For the Trilinos 11.14 release, the Trilinos Framework (that part of Trilinos not specific to any pacakge) and the following packages have a BSD-compatible license: Amesos2, AztecOO, Belos, CTrilinos, Didasko, Epetra, EpetraExt, FEI, ForTrilinos, Galeri, Globipack, Ifpack, Ifpack2, Intrepid, Isorropia, Kokkos, Komplex, LOCA, Moertel, MOOCHO, NOX, Optika, Optipack, Phalanx, Piro, Pliris, RTOp, Shards, ShyLU, Stokhos, Stratimikos, Teko, Teuchos, ThreadPool, Thyra, Tpetra, TriUtils, Xpetra, Zoltan, Zoltan2. BSD code licensed by Sandia contains the following notice: (Begin notice) Under the terms of Contract DE-AC04-94AL85000 with Sandia Corporation, the U.S. Government retains certain rights in this software. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. Neither the name of the Corporation nor the names of the contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY SANDIA CORPORATION “AS IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL SANDIA CORPORATION OR THE CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. (End notice) Upstream note about license: https://trilinos.org/download/license/ Is it eligible on Fedora? Best regards. -- --- Antonio Trande mailto: sagitter 'at' fedoraproject 'dot' org http://fedoraos.wordpress.com/ https://fedoraproject.org/wiki/User:Sagitter GPG Key: 0x6CE6D08A Check on https://keys.fedoraproject.org/

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

legal November 2016