Thanks for this information. Nmap in particular continues to confuse me with regards to licensing because they do not really hesitate to revise or replace their license on even a minor update release.
On 7/5/24 11:33 PM, Richard Fontana wrote:
I've done a long overdue review of the various Nmap licenses and have updated fedora-license-data accordingly.
- LicenseRef-Nmap: not-allowed
Related issue: https://gitlab.com/fedora/legal/fedora-license-data/-/issues/543
This is Callaway "Nmap", i.e. the GPLv2-incompatible GPLv2 gloss commented on here: https://fedoraproject.org/wiki/Licensing/Nmap This license was classified as "good" but on a new review, that assessment seems unjustified and inconsistent with the analysis of the subsequent licenses. While we should be very reluctant to overturn a past "good" classification I don't see any other option here. But there is a usage exception that says versions of Nmap covered by this license can continue to be included in Fedora Linux indefinitely. (I thought of limiting it to a couple of releases.)
- LicenseRef-NPSL-0.92: not-allowed
Related issue: https://gitlab.com/fedora/legal/fedora-license-data/-/issues/542
This was "NPSL" (on the "bad" list) prior to the migration to SPDX identifiers. See: https://lists.fedoraproject.org/archives/list/legal@lists.fedoraproject.org/... It was mistakenly imported into fedora-license-data as `LicenseRef-NPSL-0.94`.
- LicenseRef-NPSL-0.93: not-allowed
Related issues: https://gitlab.com/fedora/legal/fedora-license-data/-/issues/541 https://gitlab.com/fedora/legal/fedora-license-data/-/issues/540
This covers the multiple versions of Nmap licenses labeled as "Version 0.93" and "Version 0.94"
Looking at Fedora now we have nmap-7.95 in Fedora 40 as an update and it has:
License: LicenseRef-NPSL-0.94
The exception is only for LicenseRef-Nmap and not these NPSL variants, right? Which means nmap will have to be removed?
- LicenseRef-NPSL-0.95: not-allowed
Related issue: https://gitlab.com/fedora/legal/fedora-license-data/-/issues/539
This covers the multiple versions of Nmap licenses labeled as "Version 0.95".
Other relevant issues: https://github.com/nmap/nmap/issues/2199 https://gitlab.com/fedora/legal/fedora-license-data/-/issues/147 https://bugs.gentoo.org/749390 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=972216 https://lists.gnu.org/archive/html/guix-devel/2020-10/msg00227.html https://github.com/NixOS/nixpkgs/issues/105119 https://labs.parabola.nu/issues/2966 https://bugzilla.opensuse.org/show_bug.cgi?id=1211571
Richard