Re: [PATCH 1/2] nettle: update package to 3.1.1 version.

[akuster808 <akuster808@gmail.com>]

On 07/03/2015 12:07 AM, Anders Darander wrote:
> * akuster808 <akuster808@gmail.com> [150702 19:05]:
>
>> The current version of nettle 2.7 has one file that is GPL v3.
>> mini-gmp.*
>
>> so the license for 2.7 should be updated IMHO. So wont that put us in the
>> same boat as the upgrade?
>
> Ouch, that's no good!
>
> Ideally, we should look at that file and see for how long it's been part
> of nettle. If it's just for a short time, maybe we could go back to a
> point in time just prior to the inclusion (or license change) of that
> file.

this file has been in nettle for two years. It was introduced with th 
2.7 release.  Parts of that file are pulled from the gmp project.

>
> Has it been like this for far too long, well, then we either have to see
> what impact this has on non-GPLv3 builds...
>

Does "Lesser" GPLv3 count? Looked a the file again and 'Lesser' is near 
the beginning of the paragraph before 'version 3'.

Does this change things for nettle 2.7?

- armin

> One option, depending on the age etc, could be to check if it's possible
> to get that single file re-licensed. Short-term, we have to fix the
> license and backport that fix to all supported versions that are
> affected, even though that might introduce regressions in images around
> the world...
>
> Cheers,
> Anders
>