Bug#764814: freecad downloads and executes code

Francesco Poli invernomuto at paranoici.org
Sun Oct 12 11:01:18 UTC 2014


On Sat, 11 Oct 2014 14:43:30 -0300 Yorik van Havre wrote:

> Hi,

Hello Yorik,
I noticed this bug report and I felt the need to comment.

You probably remember me as the one who originally reported the
OpenCASCADE licensing issues for the freecad Debian package.
If anyone is interested in reading the whole "odyssey", please take a
look at the (very long) bug log [1].

[1] https://bugs.debian.org/617613

> 
> This download happens the first time a user wants to use the DXF
> import/export feature. Since the license of our DXF exporter is GPL, and
> other components of FreeCAD prevent from linking to GPL code (namely
> OpenCasCade and Coin3D) (the whole story is another Debian bug),

As you may remember, Coin3D has been re-licensed under the terms of the
3-clause BSD license [2][3].

[2] https://bugs.debian.org/617613#153
[3] https://tracker.debian.org/media/packages/c/coin3/copyright-3.1.4~abc9f50-7

But, above all, the good news is that OpenCASCADE is no longer
GPL-incompatible [4], hence there's no need to avoid GPL-licensed code
in freecad now!

[4] https://bugs.debian.org/680738#32
[5] https://bugs.debian.org/680738#37

> we found
> this trick of moving the dxf exporter out of the FreeCAD sources, and
> placing it online, so it can be downloaded by users the first time they
> need it.
[...]

I am not convinced about the soundness of this "trick", but, as I said
above, I think it's not needed anymore.

I hope this helps.
Bye.


-- 
 http://www.inventati.org/frx/
 fsck is a four letter word...
..................................................... Francesco Poli .
 GnuPG key fpr == CA01 1147 9CD2 EFDF FB82  3925 3E1C 27E1 1F69 BFFE
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/debian-science-maintainers/attachments/20141012/932357d9/attachment.sig>


More information about the debian-science-maintainers mailing list