On Fri, Nov 24, 2023 at 2:07 PM Mark Wielaard <mark@xxxxxxxxx> wrote: > > But then for the Hybrid BSD license that parts of bzip and valgrind > uses it actually has different identifiers depending on the version of > the package (it actually has both bzip2-1.0.5 and bzip2-1.0.6 which are > literally exactly the same except for the version string and the > copyright year). Ah, now I see that bzip2-1.0.5 is deprecated by SPDX in favor of bzip2-1.0.6: https://spdx.org/licenses/bzip2-1.0.5.html If I understand the explanation correctly, anything that is a match for bzip2-1.0.5 should also be a match for bzip2-1.0.6, so the latter should be used. (Jilayne probably has direct knowledge of the history there.) Richard -- _______________________________________________ legal mailing list -- legal@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to legal-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/legal@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
