https://bugzilla.redhat.com/show_bug.cgi?id=2303167 Ben Beasley <code@xxxxxxxxxxxxxxxxxx> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |code@xxxxxxxxxxxxxxxxxx --- Comment #5 from Ben Beasley <code@xxxxxxxxxxxxxxxxxx> --- I didn’t look at the package source or investigate the other license, but some comments on the ones mentioned above: https://docs.fedoraproject.org/en-US/legal/allowed-licenses/ does contain: - GPL-2.0-or-later WITH Bison-exception-2.2 - GPL-3.0-or-later WITH Bison-exception-2.2 …so it is perfectly possible to represent Bison output in SPDX. I assume the md5 implementation is one of the well-known public-domain md5 “copylibs” listed on the (obsolete) wiki page https://fedoraproject.org/wiki/Bundled_Libraries_Virtual_Provides#cite_note-2. If so, it would be LicenseRef-Fedora-Public-Domain, but you need to follow https://docs.fedoraproject.org/en-US/legal/update-existing-packages/#_public_domain: submit it for review and then add it to public-domain-text.txt in fedora-license data, similar to https://gitlab.com/fedora/legal/fedora-license-data/-/issues/550. -- You are receiving this mail because: You are always notified about changes to this product and component You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2303167 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-spam&short_desc=Report%20of%20Bug%202303167%23c5 -- _______________________________________________ package-review mailing list -- package-review@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to package-review-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-review@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue