[#113407] [Ruby master Feature#19630] [RFC] Deprecate `Kernel.open("|command-here")` due to frequent security issues — "postmodern (Hal Brodigan) via ruby-core" <ruby-core@...>

Issue #19630 has been reported by postmodern (Hal Brodigan).

19 messages 2023/05/05

[#113430] [Ruby master Feature#19633] Allow passing block to `Kernel#autoload` as alternative to second `filename` argument — "shioyama (Chris Salzberg) via ruby-core" <ruby-core@...>

Issue #19633 has been reported by shioyama (Chris Salzberg).

16 messages 2023/05/09

[#113489] [Ruby master Bug#19642] Remove vectored read/write from `io.c`. — "ioquatix (Samuel Williams) via ruby-core" <ruby-core@...>

Issue #19642 has been reported by ioquatix (Samuel Williams).

10 messages 2023/05/15

[#113498] [Ruby master Feature#19644] Module::current to complement Module::nesting — "bughit (bug hit) via ruby-core" <ruby-core@...>

Issue #19644 has been reported by bughit (bug hit).

12 messages 2023/05/16

[#113517] [Ruby master Misc#19679] Migrate Wiki from bugs.ruby-lang.org to ruby/ruby GitHub repository — "jemmai (Jemma Issroff) via ruby-core" <ruby-core@...>

Issue #19679 has been reported by jemmai (Jemma Issroff).

11 messages 2023/05/18

[#113529] [Ruby master Bug#19681] The final classpath of partially named modules is sometimes inconsistent once permanently named — "byroot (Jean Boussier) via ruby-core" <ruby-core@...>

Issue #19681 has been reported by byroot (Jean Boussier).

34 messages 2023/05/19

[#113538] [Ruby master Feature#19682] ability to get a reference to the "default definee" — "bughit (bug hit) via ruby-core" <ruby-core@...>

Issue #19682 has been reported by bughit (bug hit).

28 messages 2023/05/19

[#113601] [Ruby master Bug#19687] Should a development version of the standard library be included in ruby/ruby? — "jaruga (Jun Aruga) via ruby-core" <ruby-core@...>

Issue #19687 has been reported by jaruga (Jun Aruga).

9 messages 2023/05/23

[#113632] [Ruby master Bug#19691] Case insensitive file systems, require filename casing — "MSP-Greg (Greg L) via ruby-core" <ruby-core@...>

Issue #19691 has been reported by MSP-Greg (Greg L).

7 messages 2023/05/24

[#113656] [Ruby master Misc#19693] Data initialization is significantly slower than Struct — janosch-x via ruby-core <ruby-core@...>

Issue #19693 has been reported by janosch-x (Janosch M=FCller).

13 messages 2023/05/25

[#113660] [Ruby master Feature#19694] Add Regexp#timeout= setter — "aharpole (Aaron Harpole) via ruby-core" <ruby-core@...>

Issue #19694 has been reported by aharpole (Aaron Harpole).

15 messages 2023/05/25

[#113676] [Ruby master Bug#19697] Resolv::DNS resolution for international domains fails with "Encoding::CompatibilityError: incompatible character encodings: UTF-8 and ASCII-8BIT" — "clairity (claire c) via ruby-core" <ruby-core@...>

SXNzdWUgIzE5Njk3IGhhcyBiZWVuIHJlcG9ydGVkIGJ5IGNsYWlyaXR5IChjbGFpcmUgYykuDQ0K

6 messages 2023/05/27

[ruby-core:113439] [Ruby master Bug#16820] LEGAL is out of sync

From: "jeremyevans0 (Jeremy Evans) via ruby-core" <ruby-core@...>
Date: 2023-05-10 00:07:06 UTC
List: ruby-core #113439
Issue #16820 has been updated by jeremyevans0 (Jeremy Evans).

Status changed from Open to Closed

Ruby does not seem to have any LGPL code anymore.  The IBM code is now documented in LEGAL.  The BSD-2-Clause code is still not documented in LEGAL, but all BSD-2-Clause code seems to also be licensed under Ruby license, so I don't think it is necessary to document in LEGAL.  The benchmark code issues are also now documented in LEGAL.  Since all issues have addressed, I think this can be closed.

----------------------------------------
Bug #16820: LEGAL is out of sync
https://bugs.ruby-lang.org/issues/16820#change-103011

* Author: shyouhei (Shyouhei Urabe)
* Status: Closed
* Priority: Normal
* Backport: 2.5: UNKNOWN, 2.6: UNKNOWN, 2.7: UNKNOWN
----------------------------------------
At the very beginning of `LEGAL`, it reads:

> All the files in this distribution are covered under either the Ruby's
> license (see the file COPYING) or public-domain except some files
> mentioned below.

This means that the exception list must be comprehensive.  If we miss someone else's software there, it would be automatically made belong to matz.  This is very bad.

However this is happening now.

## Unclear situation for `benchmark` ##

For instance, `benchmark/so_concatenate.rb` comes with no license agreements.  Yet as we read its contents, there is almost no doubt that it is _not_ covered by the Ruby's license.

The problem is that the URL that was once written inside the file is lost.  Our `git log` tells nothing.  This and other files under the directory have permanently lost their origin.

## BSD licensed libraries ##

Take a look at this search result:

```
% git grep -i 'BSD-2-Clause' | wc -l
43
```

None of them are listed in `LEGAL`.

## Programs owned by IBM ##

```
% git grep 'International Business Machines' | wc -l
4
```

The four occurrences of the name IBM does not include `LEGAL`.  Also, I wonder if they are actually compatible with Ruby's license.

## LGPL portions ##

```
% git grep 'the GNU LGPL' | wc -l
11
```

It seems racc is complicated.

- `racc.gemspec` says `s.licenses = ["MIT"]`.
- It however has some files that are LGPL.
- It also has some files that are under Ruby's license.

Which one should we believe?  If we mix all of them, the library as a whole must be under LGPL.  Am I right?



-- 
https://bugs.ruby-lang.org/
 ______________________________________________
 ruby-core mailing list -- ruby-core@ml.ruby-lang.org
 To unsubscribe send an email to ruby-core-leave@ml.ruby-lang.org
 ruby-core info -- https://ml.ruby-lang.org/mailman3/postorius/lists/ruby-core.ml.ruby-lang.org/

In This Thread

Prev Next