Hi!

I own htdig package, which got recently discovered license issue with bundled libdb version ~3.x [1]. I think the only reason it is still in Fedora is that just compiled for years back. I doubt anyone is using it at the moment and I have never used it myself. I just inherited it when joined Red Hat and just once fixed FTBFS bug, otherwise there weren't been any feedback to it for years.

It uses undeclared libdb copy with Sleepycat license, which were declared incompatible for Fedora [2]. I don't want to invest time to make it compile with alternative database, because I don't think time spent on it is worth it. If anyone would like to maintain and solve those issues, send me a mail. I am happy to give it to anyone else. Upstream is long dead though.

Is it enough if I orphan that package? Is there any guidance where existing package is found to have licensing problem, how should it be solved? Should something be done to the stable branches also? Should it be retired from all stable branches as well? How should I proceed in this case?

Best Regards,
Petr

1. https://bugzilla.redhat.com/show_bug.cgi?id=2168501
2. https://gitlab.com/fedora/legal/fedora-license-data/-/issues/152

--
Petr Menšík
Software Engineer, RHEL
Red Hat, https://www.redhat.com/
PGP: DFCF908DB7C87E8E529925BC4931CA5B6C9FC5CB
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to