www-legal-discuss mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hoss Man (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (LEGAL-206) "greenmail" library purported to be ASL may actually be LGPL; is a dependency in several ASF projects
Date Mon, 07 Jul 2014 16:52:35 GMT

    [ https://issues.apache.org/jira/browse/LEGAL-206?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14053847#comment-14053847

Hoss Man commented on LEGAL-206:

your two latest examples (OS platform specific APIs that by definition are required to run
on specific platforms, but are obviously not inherently required to the ASF projects to be
compiled/run on _any_ platforms; and executable build tools that can/do have alternatives
and are not compiled/linked to by the ASF source itself) are drastically different then what
we're talking about here: a (possible) LGPL library, that is absolutely required in order
to compile some of the (test related) source code distributed by ASF projects.


Let's back up for a minute...

To be crystal clear: there is java code, distributed by the ASF, which contains lines beginning
with "import com.icegreen.greenmail..." which can *NOT* be compiled unless the user downloads
a library (from greenmail) which _MAY_ be LGPL.

This Jira issue was opened to draw attention to this (seemingly) concerning situation.

* If it is the opinion of the legal advisors of the ASF that this is not a problem, then this
Jira issue can be resolved.
* If it is the opinion of the legal advisors of the ASF that this is a problem that the ASF
needs to be concerned with and take some action to rectify, then please advise the affected
PMCs what course of action they should take.

(Either way it does not affect the Lucene PMC, or me personally, because we already decided
we don't want to touch greenmail with a 10 foot pole -- i'm just the messenger who filed the
LEGAL issue because I didn't want anyone to claim the Lucene project knew about potential
3rd party dependency license problems in ASF releases and didn't tell anybody)

> "greenmail" library purported to be ASL may actually be LGPL; is a dependency in several
ASF projects
> -----------------------------------------------------------------------------------------------------
>                 Key: LEGAL-206
>                 URL: https://issues.apache.org/jira/browse/LEGAL-206
>             Project: Legal Discuss
>          Issue Type: Question
>            Reporter: Hoss Man
> Be advised that at least 5 Apache projects appear to depend on a third party library
known as "greenmail" which advertises itself in may places as being licensed under the ASL
2.0, however most of the greemail source files contain headers claiming LGPL.
> This issue requests that the Legal VP advise the affected projects on what they need
to do (if anything) moving forward to be in compliance with ASF policy.
> Projects known to be affected (but there may be more)...
> * Apache Syncope: http://svn.apache.org/repos/asf/syncope/trunk/pom.xml
> * Apache Geronimo: https://svn.apache.org/repos/asf/geronimo/javamail/trunk/geronimo-javamail_1.4/geronimo-javamail_1.4_provider/pom.xml
> * Apache OODT: http://svn.apache.org/repos/asf/oodt/trunk/protocol/imaps/pom.xml
> * Apache Oozie: https://git-wip-us.apache.org/repos/asf?p=oozie.git;a=blob;f=pom.xml;h=bad1e0fbee619f2e5020733792c4a09256b69dcf;hb=master
> * Apache Axis2: http://svn.apache.org/repos/asf/axis/axis2/java/core/trunk/modules/transport/mail/pom.xml

This message was sent by Atlassian JIRA

To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org

View raw message