Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Fixed
-
None
-
None
-
None
Description
Jython 2.5.0 redistributes an external LGPL component (JNA) in a manner that puts Jython out of compliance with the LGPL. As such dependent components like Pig and Oozie are also arguably out of compliance with the LGPL.
It appears that this has been quietly found and fixed by the Jython guys, as version 2.5.3 does not include the JNA component. However the status of 2.5.0 with respect to the LGPL and Apache legal is still unclear.
The easiest way to remediate this whole problem is to simply move Pig and Oozie to Jython 2.5.3 and remove the question.