On Fri, Jul 5, 2024 at 11:33 PM Richard Fontana rfontana@redhat.com wrote:
I've done a long overdue review of the various Nmap licenses and have updated fedora-license-data accordingly.
- LicenseRef-Nmap: not-allowed
Related issue: https://gitlab.com/fedora/legal/fedora-license-data/-/issues/543
This is Callaway "Nmap", i.e. the GPLv2-incompatible GPLv2 gloss commented on here: https://fedoraproject.org/wiki/Licensing/Nmap This license was classified as "good" but on a new review, that assessment seems unjustified and inconsistent with the analysis of the subsequent licenses. While we should be very reluctant to overturn a past "good" classification I don't see any other option here. But there is a usage exception that says versions of Nmap covered by this license can continue to be included in Fedora Linux indefinitely. (I thought of limiting it to a couple of releases.)
- LicenseRef-NPSL-0.92: not-allowed
Related issue: https://gitlab.com/fedora/legal/fedora-license-data/-/issues/542
This was "NPSL" (on the "bad" list) prior to the migration to SPDX identifiers. See: https://lists.fedoraproject.org/archives/list/legal@lists.fedoraproject.org/... It was mistakenly imported into fedora-license-data as `LicenseRef-NPSL-0.94`.
- LicenseRef-NPSL-0.93: not-allowed
Related issues: https://gitlab.com/fedora/legal/fedora-license-data/-/issues/541 https://gitlab.com/fedora/legal/fedora-license-data/-/issues/540
This covers the multiple versions of Nmap licenses labeled as "Version 0.93" and "Version 0.94"
- LicenseRef-NPSL-0.95: not-allowed
Related issue: https://gitlab.com/fedora/legal/fedora-license-data/-/issues/539
This covers the multiple versions of Nmap licenses labeled as "Version 0.95".
Other relevant issues: https://github.com/nmap/nmap/issues/2199 https://gitlab.com/fedora/legal/fedora-license-data/-/issues/147 https://bugs.gentoo.org/749390 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=972216 https://lists.gnu.org/archive/html/guix-devel/2020-10/msg00227.html https://github.com/NixOS/nixpkgs/issues/105119 https://labs.parabola.nu/issues/2966 https://bugzilla.opensuse.org/show_bug.cgi?id=1211571
Also, a couple of related SPDX issues: https://github.com/spdx/license-list-XML/issues/1121 https://github.com/spdx/license-list-XML/issues/2492