[
https://issues.apache.org/jira/browse/HBASE-22286?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16823345#comment-16823345
]
Sean Busbey commented on HBASE-22286:
-------------------------------------
thanks folks!
> License handling incorrectly lists CDDL/GPLv2+CE as safe to not aggregate
> -------------------------------------------------------------------------
>
> Key: HBASE-22286
> URL: https://issues.apache.org/jira/browse/HBASE-22286
> Project: HBase
> Issue Type: Bug
> Components: build, community
> Affects Versions: 3.0.0, 2.3.0, 2.1.5, 2.2.1
> Reporter: Sean Busbey
> Assignee: Sean Busbey
> Priority: Critical
> Attachments: HBASE-22286.0.patch
>
>
> The template LICENSE/NOTICE stuff currently has cddl/gplv2+ce listed as an
> acceptable license for dependencies for individual listing.
> LICENSE.vm
> {code}
> ## Whitelist of lower-case licenses that it's safe to not aggregate as above.
> ## Note that this doesn't include ALv2 or the aforementioned aggregate
> ## license mentions.
> ##
> ## See this FAQ link for justifications:
> https://www.apache.org/legal/resolved.html
> ##
> ## NB: This list is later compared as lower-case. New entries must also be
> all lower-case
> #set($non_aggregate_fine = [ 'public domain', 'new bsd license', 'bsd
> license', 'bsd', 'bsd 2-clause license', 'mozilla public license version
> 1.1', 'mozilla public license version 2.0', 'creative commons attribution
> license, version 2.5', 'cddl/gplv2+ce' ])
> {code}
> This is not correct. We have to expressly say we're using the CDDL license
> for those works because we can't provide downstream with the option of
> GPLv2+CE. Also we have aggregate licensing handling for CDDL licensed works
> and this is making us miss times when dependencies are supposed to show up
> under one of them.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
