Bug 334371

Summary: RAR v3 support in clamav violates license
Product: [Fedora] Fedora Reporter: Tom "spot" Callaway <tcallawa>
Component: clamavAssignee: Enrico Scholz <rh-bugzilla>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: urgent Docs Contact:
Priority: urgent    
Version: rawhideCC: herrold, ppavliks, rpm
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: 0.91.2-3.fc7 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2007-11-01 21:15:01 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 182235    

Description Tom "spot" Callaway 2007-10-16 14:24:07 UTC
While investigating the possible inclusion of a GPL'd unrar package (see
Bugzilla 319831), it was discovered that clamav contained a RAR v3
implementation that was copied/derived from the RARlabs unrar source code.
Eugene Roshal of RARlabs confirmed that they did not give permission for any RAR
v3 implementation to be used under the GPL, only under the unrar license (which
is GPL incompatible).

We need to remove this code from libclamav immediately, in all currently
maintained releases of Fedora (and EPEL, if branched).

Comment 1 Fedora Update System 2007-11-01 21:15:00 UTC
clamav-0.91.2-3.fc7 has been pushed to the Fedora 7 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 2 R P Herrold 2007-12-21 17:11:00 UTC
How does an update release address the question of a license issue?  Shouldn't
this not have closed?

Comment 3 Tom "spot" Callaway 2007-12-21 17:14:44 UTC
It addressed it because I took out the unrar code from the clamav tarball,
reported the issue to clamav upstream, and pushed a new update. :)