Bug#730754: include/liblas/detail/sha1.hpp is non-free

Howard Butler hobu.inc at gmail.com
Mon Dec 23 19:51:42 UTC 2013


This header wasn't used at all, and I have removed it from the tree.

https://github.com/libLAS/libLAS/commit/ff7cb669bea35b6129b2ef634c47a4daf9d6951d

Sorry it took so long to get on this,

Howard

On Dec 5, 2013, at 5:30 PM, Francesco P. Lovergine <frankie at debian.org> wrote:

> On Fri, Nov 29, 2013 at 09:37:52AM +0100, Luca Falavigna wrote:
>> Source: liblas
>> Version: 1.2.1-5.1
>> Severity: serious
>> 
>> 
>> include/liblas/detail/sha1.hpp is licensed under these terms:
>>  //  sha1.h
>>  //
>>  //  Copyright (C) 1998
>>  //  Paul E. Jones <paulej at arid.us>
>>  //  All Rights Reserved.
>>  //
>>  //  This software is licensed as "freeware."  Permission to distribute
>>  //  this software in source and binary forms is hereby granted without
>>  //  a fee.  THIS SOFTWARE IS PROVIDED 'AS IS' AND WITHOUT ANY EXPRESSED
>>  //  OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
>>  //  WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
>>  //  THE AUTHOR SHALL NOT BE HELD LIABLE FOR ANY DAMAGES RESULTING
>>  //  FROM THE USE OF THIS SOFTWARE, EITHER DIRECTLY OR INDIRECTLY, INCLUDING,
>>  //  BUT NOT LIMITED TO, LOSS OF DATA OR DATA BEING RENDERED INACCURATE.
>> 
>> Thus, this portion of code is non-free.
>> 
> 
> This issue still appears in the 1.7 (latest) version. A proper way to fix this
> is adopting/adapting a license-compatible implementation such as: 
> http://tamale.net/sha1
> It is not complicated at all and I could provide a patch if Howard had not
> time to fix this issue upstream.
> 
> -- 
> Francesco P. Lovergine



More information about the Pkg-grass-devel mailing list