McAfee, in its annual report filed in December of last year, (and originally reported here) warned its investors that its ability to commercialize its products could be impacted by “ambiguous” "open source license terms. McAfee noted that “despite having conducted the appropriate due diligence,” these ambiguities “may result in unanticipated or uncertain obligations regarding our products.” According to McAfee the GPL is of particular concern since it has “not been interpreted in a court of law” and use of GPL software “could subject certain portions of our proprietary to the GPL requirements.”
Under the GPL, licensees may redistribute open source software provided the licensee’s software that incorporates the open source software is also made available under the terms of the GPL.
The Software Freedom Law Center recently filed lawsuits alleging violations of the GPL by Monsoon Multimedia, High Gain Antennae LLC, Xterasys and Verizon.
Companies such as Monsoon Multimedia and Xterasys have settled their lawsuits and have resumed distribution of their products. As part of their settlements, the companies agreed to pay undisclosed amounts of damages. They also agreed to adhere to the terms of the license as well as appoint an internal Open Source Compliance Officer. The Open Source Compliance Officer’s duties include ensuring compliance with the GPL licenses as well as informing downstream parties of their rights pursuant to the license.
These suits are significant because the enforcement of the GPL against a party unlawfully distributing software in violation of the GPL had previously been rare. Users of software subject to the GPL need to understand that the very real threat of suit for noncompliance with the GPL license looms whenever a company uses and incorporates open source software without fully understanding the requirements of the GPL.
McAfee’s warning and the recent GPL enforcement lawsuits emphasize the importance of developing an Open Source compliance program. With the increased adoption of Open Source Software and future Open Source enforcement lawsuits likely, ensuring that you have the ability to exploit your commercial software on your own terms is critical.