On Fri, Nov 29, 2013 at 09:37:52AM +0100, Luca Falavigna wrote: > Source: liblas > Version: 1.2.1-5.1 > Severity: serious > > > include/liblas/detail/sha1.hpp is licensed under these terms: > // sha1.h > // > // Copyright (C) 1998 > // Paul E. Jones <pau...@arid.us> > // All Rights Reserved. > // > // This software is licensed as "freeware." Permission to distribute > // this software in source and binary forms is hereby granted without > // a fee. THIS SOFTWARE IS PROVIDED 'AS IS' AND WITHOUT ANY EXPRESSED > // OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED > // WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. > // THE AUTHOR SHALL NOT BE HELD LIABLE FOR ANY DAMAGES RESULTING > // FROM THE USE OF THIS SOFTWARE, EITHER DIRECTLY OR INDIRECTLY, INCLUDING, > // BUT NOT LIMITED TO, LOSS OF DATA OR DATA BEING RENDERED INACCURATE. > > Thus, this portion of code is non-free. >
This issue still appears in the 1.7 (latest) version. A proper way to fix this is adopting/adapting a license-compatible implementation such as: http://tamale.net/sha1 It is not complicated at all and I could provide a patch if Howard had not time to fix this issue upstream. -- Francesco P. Lovergine -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
