Jonathan,
I'm definitely open to working with debian to find a way to get you
early access. We've guessed that was something some distributions
would like, but I haven't worked with each distro to figure out their
needs yet. Thanks for bringing the subject up.
For the March 4th release, I get a CVSS score of 1.8 and 3.5 for the
non-public bugs (if you have another preferred webapp scoring system,
I'm happy to generate a score for you). Additionally, already publicly
in the release branches are patches to pass '2' to
CURLOPT_SSL_VERIFYHOST instead of 'true' for outbound curl
connections.
Hope that helps!
Chris
I’m considering this issue RC.
On Tue, 6 Aug 2013, Joerg Jaspert wrote:
> CSSMin.php is Apache 2.0 License
This is GPLv3+ compatible whereas the rest is GPLv2+ or compatible,
which means this should be not an issue, except for needing to
document that in debian/copyright. Please correct me if I’m wrong.
> IEContentAnalyzer is non-free actually. "It may be redistributed
> without restriction" is missing some things we require for main.
Right. Tim Starling, you claim copyright on that file. Can you
please confirm which DFSG-free Open Source™ licence(s) we can
use and distribute that file under?
> JavaScriptMinifier.php is Apache,MIT,GPL,LGPL - and so falls under
> GPL, but it wouldnt be bad to list the options it offers for users
> looking into the copyright file. While you modify it anyways. :)
>
> jsminplus is MPL1.1 or GPL or LGPL. Please list, for completness.
Aye. These weren’t an issue for the mediawiki package before the
split (which I still don’t agree with but will only passively
oppose).
I’ve got more:
IEUrlExtension.php does not have any licence at all. Is it safe
to assume it’s GPLv2+ as “all of the rest of MediaWiki”?
HttpStatus.php has no complaints ;-) it’s not code and certainly
not copyrightable.
I’ll be removing IEContentAnalyzer.php and IEUrlExtension.php
from MediaWiki in Debian within this month if I do not get
any positive feedback or a good reason to delay this.
bye,
//mirabilos
--
tarent solutions GmbH
Rochusstraße 2-4, D-53123 Bonn • http://www.tarent.de/
Tel: +49 228 54881-393 • Fax: +49 228 54881-314
HRB 5168 (AG Bonn) • USt-ID (VAT): DE122264941
Geschäftsführer: Boris Esser, Sebastian Mancke