https://bugzilla.redhat.com/show_bug.cgi?id=2005536 --- Comment #8 from Fabio Valentini <decathorpe@xxxxxxxxx> --- Finally got an actionable response from Red Hat Legal after asking ** a third time **: https://lists.fedoraproject.org/archives/list/legal@xxxxxxxxxxxxxxxxxxxxxxx/message/Z3PPWO6KNIPK2BNVNY5QUGJPCFSMO2BO/ The relevant part: > > Ok, so ... I'm pretty sure we actually don't *need* the affected code. > > Would removing all p434 related code from the sources entirely (to be > > on the safe side), and building the package without support for this > > curve, be an acceptable solution until the legal status is cleared up? > Yes, that's an acceptable solution in the meantime. All code related to p434 curve will need to removed from the upstream tarball and the Fedora package can only use a "cleaned" tarball. -- You are receiving this mail because: You are on the CC list for the bug. You are always notified about changes to this product and component https://bugzilla.redhat.com/show_bug.cgi?id=2005536 _______________________________________________ package-review mailing list -- package-review@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to package-review-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-review@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue