legal April 2021

legal@lists.fedoraproject.org

2 participants
6 discussions

Sleepycat license with SaaS restriction
by Florian Weimer 08 Jul '25

08 Jul '25

cryptlib is licensed under the Sleepycat license with a SaaS restriction: “Note that decoupling the software from the user, for example by running in a SaaS configuration, does not exempt you from these requirements.” (Full text attached.) This was not part of the original Sleepycat license, so a new license tag is required. Maybe this license is not even free; this additional clause seems to be a restriction on use. But perhaps it is not so different from the AGPL. Thanks, Florian

6 8

Brainpool Curves in Fedora (openssl, libgcrypt, gnupg)
by Timothée Ravier 21 May '24

21 May '24

Hi everyone, The ECC Brainpool Curves [1][2] are currently not available in Fedora as according to this BZ [3], this needs Fedora Legal approval. Could someone from the legal team take a look to see if there are any blockers regarding Brainpool Curves inclusion in Fedora? Thanks! [1] https://en.wikipedia.org/wiki/Elliptic-curve_cryptography#Implementation [2] https://tools.ietf.org/html/rfc5639 [3] https://bugzilla.redhat.com/show_bug.cgi?id=1413618

14 31

Henry Spencer's license
by Petr Šabata 06 Mar '23

06 Mar '23

Dear legal, While checking the contents of our `perl' package, I noticed the following: (...) /* NOTE: this is derived from Henry Spencer's regexp code, and should not * confused with the original package (see point 3 below). Thanks, Henry! */ /* Additional note: this code is very heavily munged from Henry's version * in places. In some spots I've traded clarity for efficiency, so don't * blame Henry for some of the lack of readability. */ /* The names of the functions have been changed from regcomp and * regexec to pregcomp and pregexec in order to avoid conflicts * with the POSIX routines of the same names. */ (...) * pregcomp and pregexec -- regsub and regerror are not used in perl * * Copyright (c) 1986 by University of Toronto. * Written by Henry Spencer. Not derived from licensed software. * * Permission is granted to anyone to use this software for any * purpose on any computer system, and to redistribute it freely, * subject to the following restrictions: * * 1. The author is not responsible for the consequences of use of * this software, no matter how awful, even if they arise * from defects in it. * * 2. The origin of this software must not be misrepresented, either * by explicit claim or by omission. * * 3. Altered versions must be plainly marked as such, and must not * be misrepresented as being the original software. * **** Alterations to Henry's code are... **** **** Copyright (C) 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, **** 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008 **** by Larry Wall and others **** **** You may distribute under the terms of either the GNU General Public **** License or the Artistic License, as specified in the README file. (...) You can see the whole file here: https://metacpan.org/source/SHAY/perl-5.20.1/regexec.c I looked but couldn't find any common name for this license of Henry's. Is it on our list? Is it free? What name should I use in the License tag? Thank you, Petr

5 9

about openssl we may enable and build all elliptic curves on corp ?
by Sérgio Basto 05 Nov '22

05 Nov '22

Hello, I reopen or start thinking again on this question of enable elliptic curves of openssl [1] So going directly to the point, may I built all source of openssl in copr [2] ? or at least some other curves that fedora package don't ship? [1] https://bugzilla.redhat.com/show_bug.cgi?id=1405843 [2] Version: 1.0.2k %global fips_version 2.0.14 I mean sources: http://ftp.o penssl.org/source/openssl-%{version}.tar.gz and http://ftp.openssl.org/s ource/openssl-fips-%{fips_version}.tar.gz Thanks , -- Sérgio M. B.

4 6

Are these Unicode Consortium files permissible content?
by Richard W.M. Jones 23 Apr '21

23 Apr '21

Bad news is we're shipping a non-free file in the ocaml-camomile package: https://github.com/yoriyuki/Camomile/blob/master/Camomile/locales/eo.txt The good news is that there is a later, possibly more permissively licensed version of the same data shipped by the Unicode Consortium. To replace the above file it looks like we'll need to combine the following files together: https://github.com/unicode-org/icu/blob/main/icu4c/source/data/region/eo.txt https://github.com/unicode-org/icu/blob/main/icu4c/source/data/locales/eo.t… https://github.com/unicode-org/icu/blob/main/icu4c/source/data/lang/eo.txt https://github.com/unicode-org/icu/blob/main/icu4c/source/data/rbnf/eo.txt The license of these is really unclear to me, but it seems as if from https://fedoraproject.org/wiki/Licensing:Main?rd=Licensing that _maybe_ we're OK? Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones Read my programming and virtualization blog: http://rwmj.wordpress.com Fedora Windows cross-compiler. Compile Windows programs, test, and build Windows installers. Over 100 libraries supported. http://fedoraproject.org/wiki/MinGW

2 1

Proposed update of Fedora's default content license
by Ben Cotton 01 Apr '21

01 Apr '21

Hi everyone, I'm sending this to several lists that might care about the default content license. The Fedora Council is considering an update of the default *content* license for Fedora contributions to the Creative Commons Attribute Share-Alike 4.0 (CC BY-SA 4.0) license. Currently, it is CC BY-SA 3.0. This license applies to content (not code) submitted to Fedora that does not have an explicit license attached. It does not override the explicit license choices of contributors or upstream projects. For more information about the improvements in this license, see the Community Blog post[1]. The Council will begin voting on this on 16 April in accordance with the Policy Change Policy[2]. To keep the discussion unified, please discuss this proposal in the Discussion thread[3]. As a reminder, the Council posts proposed *policy changes* to discussion.fedorapoject.org and communityblog.fedoraproject.org. [1] https://communityblog.fedoraproject.org/policy-proposal-update-default-cont… [2] https://docs.fedoraproject.org/en-US/council/policy/policy-change-policy/ [3] https://discussion.fedoraproject.org/t/policy-proposal-update-default-conte… -- Ben Cotton He / Him / His Senior Program Manager, Fedora & CentOS Stream Red Hat TZ=America/Indiana/Indianapolis

1 1

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

legal April 2021