Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 694424 - dev-util/cargo-tree: Missing LICENSE for bundled crates
Summary: dev-util/cargo-tree: Missing LICENSE for bundled crates
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Georgy Yakovlev
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: 694790
  Show dependency tree
 
Reported: 2019-09-15 07:02 UTC by Michał Górny
Modified: 2020-02-18 04:54 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2019-09-15 07:02:05 UTC
FWICS, the package is bundling a bunch of crates with licenses:
- || ( MIT Apache-2.0 )
- || ( MIT Unlicense )
- MIT
- MPL-2.0
- || ( Apache-2.0 Boost-1.0 )
- ISC
- BSD
- BSD-2
- zlib

- GPL-3 (possibly || ( GPL-3 Apache-2.0 MIT ) but Cargo.toml lists only GPL)
- GPL-3 (this time alone)
- BSD

However, they are not listed in LICENSE.  Furthermore, it is invalid to combine GPL-3 and non-GPL code and redistribute it as MIT.  The resulting executable needs to be licensed as GPL-3 to comply.
Comment 1 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2019-09-15 07:05:54 UTC
(In reply to Michał Górny from comment #0)
> - GPL-3 (possibly || ( GPL-3 Apache-2.0 MIT ) but Cargo.toml lists only GPL)
> - GPL-3 (this time alone)
> - BSD
> 
> However, they are not listed in LICENSE.  Furthermore, it is invalid to
> combine GPL-3 and non-GPL code and redistribute it as MIT.  The resulting
> executable needs to be licensed as GPL-3 to comply.

Please scratch the part about GPL.  It's leftover from cloning bug.
Comment 2 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2019-11-03 20:00:01 UTC
Ping.
Comment 3 Larry the Git Cow gentoo-dev 2019-12-09 20:45:33 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b690c34a40b704f414568660d4217c5e12922304

commit b690c34a40b704f414568660d4217c5e12922304
Author:     Georgy Yakovlev <gyakovlev@gentoo.org>
AuthorDate: 2019-12-09 20:44:56 +0000
Commit:     Georgy Yakovlev <gyakovlev@gentoo.org>
CommitDate: 2019-12-09 20:45:24 +0000

    dev-util/cargo-tree: bump to 0.27.0
    
    Bug: https://bugs.gentoo.org/694424
    Package-Manager: Portage-2.3.79, Repoman-2.3.17
    Signed-off-by: Georgy Yakovlev <gyakovlev@gentoo.org>

 dev-util/cargo-tree/Manifest                 |  98 ++++++++++++++
 dev-util/cargo-tree/cargo-tree-0.27.0.ebuild | 188 +++++++++++++++++++++++++++
 2 files changed, 286 insertions(+)
Comment 4 Larry the Git Cow gentoo-dev 2020-02-18 04:54:52 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=cd57f91fe88d34a222533ed8d8d2bcde89803998

commit cd57f91fe88d34a222533ed8d8d2bcde89803998
Author:     Georgy Yakovlev <gyakovlev@gentoo.org>
AuthorDate: 2020-02-18 04:54:25 +0000
Commit:     Georgy Yakovlev <gyakovlev@gentoo.org>
CommitDate: 2020-02-18 04:54:25 +0000

    dev-util/cargo-tree: drop old
    
    Closes: https://bugs.gentoo.org/694424
    Package-Manager: Portage-2.3.89, Repoman-2.3.20
    Signed-off-by: Georgy Yakovlev <gyakovlev@gentoo.org>

 dev-util/cargo-tree/Manifest                 | 280 ---------------------------
 dev-util/cargo-tree/cargo-tree-0.23.0.ebuild | 189 ------------------
 dev-util/cargo-tree/cargo-tree-0.24.0.ebuild | 181 -----------------
 dev-util/cargo-tree/cargo-tree-0.25.0.ebuild | 182 -----------------
 dev-util/cargo-tree/cargo-tree-0.26.0.ebuild | 186 ------------------
 dev-util/cargo-tree/cargo-tree-0.27.0.ebuild | 188 ------------------
 6 files changed, 1206 deletions(-)