Bug 848659

Summary: fop: non-free ICM color profile included
Product: [Fedora] Fedora Reporter: Mikolaj Izdebski <mizdebsk>
Component: fopAssignee: Ruediger Landmann <rlandman>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: unspecified    
Version: 19CC: c.david86, eric, rhbugs, rlandman, tcallawa
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-04-20 19:34:54 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 182235, 854316    
Attachments:
Description Flags
proposed patch none

Description Mikolaj Izdebski 2012-08-16 07:09:51 UTC 
Description of problem:
fop includes non-free elements. Quoting from
./fop-1.0/src/java/org/apache/fop/pdf/sRGB Color Space Profile.icm.LICENSE.txt:

> Copyright (c) 1998 Hewlett-Packard Company
>
> To anyone who acknowledges that the file "sRGB Color Space Profile.icm" 
> is provided "AS IS" WITH NO EXPRESS OR IMPLIED WARRANTY:
> permission to use, copy and distribute this file for any purpose is hereby 
> granted without fee, provided that the file is not changed including the HP 
> copyright notice tag, and that the name of Hewlett-Packard Company not be 
> used in advertising or publicity pertaining to distribution of the software 
> without specific, written prior permission.  Hewlett-Packard Company makes 
> no representations about the suitability of this software for any purpose.

This license is non-free because it doesn't allow modification.
Please remove non-free parts from Fedora.

This bug affects all supported or developed Fedora releases, from F16 to F19.
Comment 1 Tom "spot" Callaway 2012-08-16 14:04:47 UTC 
Upstream is tracking this issue:
https://issues.apache.org/bugzilla/show_bug.cgi?id=52704
Comment 2 Mikolaj Izdebski 2013-01-28 09:25:29 UTC 
Upstream hasn't done much about this issue. Moreover, their proposed solutions are unacceptable for Fedora. The first one was adding an exception to ship non-free profile (which they already did in a similar case of pdfbox) or to unbundle the profile from their distribution tarball and let anyone that wants to compile or use fop to download the non-free profile separately.

Because this issue is important I would suggest not to wait for upstream to resolve this, but instead replace non-free color profile with a free one.

There are some free profiles available. Debian ships a collection of zlib-licensed profiles (package icc-profiles-free) and Argyll Color Management System provides color profiles under AGPL.
Comment 3 Michal Srb 2013-04-15 12:39:11 UTC 
Created attachment 735886 [details]
proposed patch

This patch replaces non-free color profile with free profile from icc-profiles-openicc package.

It also updates package to the newest upstream version 1.1 (#885471)
Comment 4 Fedora Update System 2013-04-15 16:07:59 UTC 
fop-1.1-1.fc19 has been submitted as an update for Fedora 19.
https://admin.fedoraproject.org/updates/fop-1.1-1.fc19
Comment 5 Fedora Update System 2013-04-16 16:08:12 UTC 
Package fop-1.1-1.fc19:
* should fix your issue,
* was pushed to the Fedora 19 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing fop-1.1-1.fc19'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2013-5777/fop-1.1-1.fc19
then log in and leave karma (feedback).
Comment 6 Fedora Update System 2013-04-20 19:34:57 UTC 
fop-1.1-1.fc19 has been pushed to the Fedora 19 stable repository.  If problems still persist, please make note of it in this bug report.