Hi,
I'm currently working on hashcat 7, and in comparison with version 6
(currently in Fedora Linux), the project copied a few components code
into its own repo [1].
These new components, not in Fedora Linux already, and not already
handled in hashcat 6 are:
* phc-winner-argon2. A reference implementation of argon2. License
choice of Apache License 2 or CC0 1
* scrypt-jane. License choice of MIT or Public Domain
* sse2neon. License MIT
* yescrypt. License BSD-2-Clause (Simplified)
My initial investigation tells me there are not patents on any of these
cryptography libs. I'm writing to ask if the legal team could please
double check this to make sure everything is fine before proceeding with
the update.
Thank you,
Carlos R.F.
[1] https://github.com/hashcat/hashcat/tree/v7.1.2/deps
Hi,
Valgrind has been upgraded to GPLv3+. I was packaging
valgrind-3.26.0-RC1 and redid the License tags.
There is one new tag where rpminspect complains:
GPL-3.0-or-later WITH GCC-exception-2.0
https://artifacts.dev.testing-farm.io/3ccb5ff4-8019-45ff-ac91-f4642d28ed8f/
BAD Unapproved license in valgrind-1:3.26.0-0.1.RC1.fc44.src:
GPL-3.0-or-later WITH GCC-exception-2.0 Not Waivable
Suggested remedy:
The specified license abbreviation is not listed as approved in
the\nlicense database. The license database is specified in the
rpminspect\nconfiguration file. Check this file and send a pull
request to the\nappropriate upstream project to update the
database. If the license\nis listed in the database but marked
unapproved, you may need to work\nwith the legal team regarding
options for this software.\n
It is not clear to me which/where this license database is or which
configuration file is being referred to. So I am hoping someone on
this list can point me to that and let me know whether and how to
update it to allow GPL-3.0-or-later WITH GCC-exception-2.0.
For reference the files in question have this header:
This file is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 3 of the License, or
(at your option) any later version.
In addition to the permissions in the GNU General Public License, the
Free Software Foundation gives you unlimited permission to link the
compiled version of this file into combinations with other programs,
and to distribute those combinations without any restriction coming
from the use of this file. (The General Public License restrictions
do apply in other respects; for example, they cover modification of
the file, and distribution when not linked into a combined
executable.)
Thanks,
Mark