• Bug#1091999: parser3-cgi: Contains incompatible license combination

    From Bastian Germann@21:1/5 to All on Fri Jan 3 12:10:01 2025
    Package: parser3-cgi
    Version: 3.4.5-1
    Severity: serious

    parser3-cgi and libapache2-mod-parser3 combine GPL licensed files with the RSA-MD licensed files in src/lib/md5.
    RSA-MD is incompatible with any GPL version because of its advertisement clause:

    """
    License is also granted to make and use derivative works provided that such works are identified as "derived from the RSA Data
    Security, Inc. MD5 Message-Digest Algorithm" in all material mentioning or referencing the derived work.
    """

    Also, the Apache-1.1 license used in those files is problematic with GPL.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)