[OE-core] [PATCH 1/2] nettle: update package to 3.1.1 version.

[Paul Eggleton]

On Friday 03 July 2015 09:07:16 Anders Darander wrote:
> * akuster808 <akuster808 at gmail.com> [150702 19:05]:
> > The current version of nettle 2.7 has one file that is GPL v3.
> > mini-gmp.*
> > 
> > so the license for 2.7 should be updated IMHO. So wont that put us in the
> > same boat as the upgrade?
> 
> Ouch, that's no good!
> 
> Ideally, we should look at that file and see for how long it's been part
> of nettle. If it's just for a short time, maybe we could go back to a
> point in time just prior to the inclusion (or license change) of that
> file.
> 
> Has it been like this for far too long, well, then we either have to see
> what impact this has on non-GPLv3 builds...
> 
> One option, depending on the age etc, could be to check if it's possible
> to get that single file re-licensed. Short-term, we have to fix the
> license and backport that fix to all supported versions that are
> affected, even though that might introduce regressions in images around
> the world...

We also ought to poke upstream because as far as I can tell they have not 
noted the addition of this differently licensed source in any of the license 
notices shipped with it (other than in the added GPLv3 source files themselves, 
of course).

Armin, is that something you'd be able to take care of?

Cheers,
Paul

-- 

Paul Eggleton
Intel Open Source Technology Centre