Bug 2296006

Summary: nmap 7.95 is under a license not allowed in Fedora
Product: [Fedora] Fedora Reporter: Richard Fontana <rfontana>
Component: nmapAssignee: Martin Osvald 🛹 <mosvald>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 40CC: mosvald, pavel
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: nmap-7.92-2.fc41 nmap-7.92-2.fc40 nmap-7.92-2.fc39 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2024-07-10 05:41:29 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Richard Fontana 2024-07-05 17:55:29 UTC
nmap 7.95 is apparently under this license:
https://github.com/nmap/nmap/blob/47919b8dac98ad0f2639018e2b99ea3ad6b5e70a/LICENSE

This has been reviewed in Fedora and has been determined to be *not-allowed* under the identifier LicenseRef-NPSL-0.95:
https://gitlab.com/fedora/legal/fedora-license-data/-/issues/539
https://gitlab.com/fedora/legal/fedora-license-data/-/merge_requests/588

Related upstream issue:
https://github.com/nmap/nmap/issues/2199

The spec file for the Fedora package incorrectly states:
License: LicenseRef-NPSL-0.94

That license (LicenseRef-NPSL-0.94) (regardless of what it refers to, which is somewhat unclear at the moment) is itself classified as not-allowed, so this package shouldn't have been included in Fedora even if that metadata were correct. 

Reproducible: Always

Comment 2 Fedora Update System 2024-07-10 05:26:42 UTC
FEDORA-2024-4318a0b317 (nmap-7.92-2.fc41) has been submitted as an update to Fedora 41.
https://bodhi.fedoraproject.org/updates/FEDORA-2024-4318a0b317

Comment 3 Fedora Update System 2024-07-10 05:41:29 UTC
FEDORA-2024-4318a0b317 (nmap-7.92-2.fc41) has been pushed to the Fedora 41 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 4 Fedora Update System 2024-07-10 05:52:34 UTC
FEDORA-2024-2c1a832bd8 (nmap-7.92-2.fc40) has been submitted as an update to Fedora 40.
https://bodhi.fedoraproject.org/updates/FEDORA-2024-2c1a832bd8

Comment 5 Fedora Update System 2024-07-10 06:14:00 UTC
FEDORA-2024-56400866f4 (nmap-7.92-2.fc39) has been submitted as an update to Fedora 39.
https://bodhi.fedoraproject.org/updates/FEDORA-2024-56400866f4

Comment 6 Fedora Update System 2024-07-11 01:28:41 UTC
FEDORA-2024-2c1a832bd8 has been pushed to the Fedora 40 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2024-2c1a832bd8`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2024-2c1a832bd8

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 7 Fedora Update System 2024-07-11 01:44:25 UTC
FEDORA-2024-56400866f4 has been pushed to the Fedora 39 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2024-56400866f4`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2024-56400866f4

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 8 Fedora Update System 2024-07-13 02:46:19 UTC
FEDORA-2024-2c1a832bd8 (nmap-7.92-2.fc40) has been pushed to the Fedora 40 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 9 Fedora Update System 2024-07-19 02:21:32 UTC
FEDORA-2024-56400866f4 (nmap-7.92-2.fc39) has been pushed to the Fedora 39 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 10 Red Hat Bugzilla 2024-11-17 04:25:03 UTC
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 120 days