Bug 236309

Summary: itext contains Sun confidential code
Product: [Fedora] Fedora Reporter: Kevin Kofler <kevin>
Component: itextAssignee: Anthony Green <green>
Status: CLOSED WONTFIX QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: medium    
Version: 6CC: herrold
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2007-06-22 14:54:50 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 245222    

Description Kevin Kofler 2007-04-12 23:54:33 UTC
Description of problem:
The following files in the itext tarball:
com/lowagie/text/pdf/codec/postscript/PACommand.java
com/lowagie/text/pdf/codec/postscript/PAContext.java
com/lowagie/text/pdf/codec/postscript/PAEngine.java
com/lowagie/text/pdf/codec/postscript/PAPencil.java
com/lowagie/text/pdf/codec/postscript/PAToken.java
com/lowagie/text/pdf/codec/postscript/PainterException.java

contain code with the following copyright header:
/*
 * Copyright 1998 by Sun Microsystems, Inc.,
 * 901 San Antonio Road, Palo Alto, California, 94303, U.S.A.
 * All rights reserved.
 *
 * This software is the confidential and proprietary information
 * of Sun Microsystems, Inc. ("Confidential Information").  You
 * shall not disclose such Confidential Information and shall use
 * it only in accordance with the terms of the license agreement
 * you entered into with Sun.
 */

Version-Release number of selected component (if applicable):
itext-1.3-3.fc6

Additional info:
itext is a dependency of rssowl, so if itext is pulled, rssowl has to go to.

Comment 1 Kevin Kofler 2007-06-21 18:21:27 UTC
The offending code has been zapped upstream in version 2.0.3:
> Removal of EPS support. The code that was used from SUN's PostscriptDemo had
> ambiguous license information. Therefore it is better to look for an
> alternative.

Comment 2 Kevin Kofler 2007-06-21 18:30:44 UTC
However, itext is really a license minefield, searching for "Sun Microsystems" 
covered up some code which is essentially BSD-licensed, but with the following 
obnoxious clause added:
> You acknowledge that Software is not designed,licensed or intended for use
> in the design, construction, operation or maintenance of any nuclear
> facility.
The "licensed" part is the issue, because this appears to restrict the 
BSD-style license preceding this paragraph, making the code non-Free.

I wonder how many other supposedly Free Software Java projects are 
incorporating Sun code under similar non-Free licenses.

Comment 3 Andrew Overholt 2007-06-21 19:05:58 UTC
Sadly, much of the java world has typically been poor with licence checking and
code copying.

Comment 4 Anthony Green 2007-06-22 13:58:55 UTC
The source contains a text file that tries to justify the sun licensed code.  I
don't have time to sort all this out, so I intend to EOL itext and rssowl in
Extras and F7.  If somebody wants to dig through the licensing issues then they
should feel free to take these packages over.  overholt tells me that rssowl2
doesn't require itext, so it looks like it can return in Fedora 8. 


Comment 5 Anthony Green 2007-06-22 14:54:50 UTC
I've just completed the EOL process and am closing this bug.