Bug 877751

Summary:	sci-mathematics/pspp has incorrect LICENSE
Product:	Gentoo Linux	Reporter:	ganooslashlinus
Component:	Current packages	Assignee:	Gentoo Science Mathematics related packages <sci-mathematics>
Status:	RESOLVED FIXED
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Other
Whiteboard:
Package list:		Runtime testing required:	---

Description ganooslashlinus 2022-10-20 10:53:32 UTC

All ebuilds: LICENSE="GPL-3"

pspp --version:
pspp (GNU PSPP) 1.6.2
Copyright (C) 2022 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <https://gnu.org/licenses/gpl.html>.
This is free software: you are free to change and redistribute it.

Comment 1 Larry the Git Cow gentoo-dev

2023-01-01 14:30:25 UTC

The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=1542309301fd9e3f4e35c8685ef956b6f9f58377

commit 1542309301fd9e3f4e35c8685ef956b6f9f58377
Author:     Michael Orlitzky <mjo@gentoo.org>
AuthorDate: 2022-12-31 16:52:55 +0000
Commit:     Michael Orlitzky <mjo@gentoo.org>
CommitDate: 2023-01-01 14:27:06 +0000

    sci-mathematics/pspp: new revision to fix a few security and QA issues.
    
    We fix CVE-2022-39831 and CVE-2022-39832 the same way upstream did, by
    refusing to install the vulnerable program (which was mainly only used
    for debugging anyway). We now also use a more accurate LICENSE, and add
    a patch to fix underlinking visible with lld/mold.
    
    Bug: https://bugs.gentoo.org/868618
    Closes: https://bugs.gentoo.org/732048
    Closes: https://bugs.gentoo.org/877751
    Signed-off-by: Michael Orlitzky <mjo@gentoo.org>

 .../pspp/files/pspp-1.6.2-underlinking.patch       | 27 +++++++
 sci-mathematics/pspp/pspp-1.6.2-r2.ebuild          | 88 ++++++++++++++++++++++
 2 files changed, 115 insertions(+)