Bug 236309 - itext contains Sun confidential code
itext contains Sun confidential code
Status: CLOSED WONTFIX
Product: Fedora
Classification: Fedora
Component: itext (Show other bugs)
6
All Linux
medium Severity medium
: ---
: ---
Assigned To: Anthony Green
Fedora Extras Quality Assurance
:
Depends On:
Blocks: 245222
  Show dependency treegraph
 
Reported: 2007-04-12 19:54 EDT by Kevin Kofler
Modified: 2007-11-30 17:12 EST (History)
0 users

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2007-06-22 10:54:50 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

  None (edit)
Description Kevin Kofler 2007-04-12 19:54:33 EDT
Description of problem:
The following files in the itext tarball:
com/lowagie/text/pdf/codec/postscript/PACommand.java
com/lowagie/text/pdf/codec/postscript/PAContext.java
com/lowagie/text/pdf/codec/postscript/PAEngine.java
com/lowagie/text/pdf/codec/postscript/PAPencil.java
com/lowagie/text/pdf/codec/postscript/PAToken.java
com/lowagie/text/pdf/codec/postscript/PainterException.java

contain code with the following copyright header:
/*
 * Copyright 1998 by Sun Microsystems, Inc.,
 * 901 San Antonio Road, Palo Alto, California, 94303, U.S.A.
 * All rights reserved.
 *
 * This software is the confidential and proprietary information
 * of Sun Microsystems, Inc. ("Confidential Information").  You
 * shall not disclose such Confidential Information and shall use
 * it only in accordance with the terms of the license agreement
 * you entered into with Sun.
 */

Version-Release number of selected component (if applicable):
itext-1.3-3.fc6

Additional info:
itext is a dependency of rssowl, so if itext is pulled, rssowl has to go to.
Comment 1 Kevin Kofler 2007-06-21 14:21:27 EDT
The offending code has been zapped upstream in version 2.0.3:
> Removal of EPS support. The code that was used from SUN's PostscriptDemo had
> ambiguous license information. Therefore it is better to look for an
> alternative.
Comment 2 Kevin Kofler 2007-06-21 14:30:44 EDT
However, itext is really a license minefield, searching for "Sun Microsystems" 
covered up some code which is essentially BSD-licensed, but with the following 
obnoxious clause added:
> You acknowledge that Software is not designed,licensed or intended for use
> in the design, construction, operation or maintenance of any nuclear
> facility.
The "licensed" part is the issue, because this appears to restrict the 
BSD-style license preceding this paragraph, making the code non-Free.

I wonder how many other supposedly Free Software Java projects are 
incorporating Sun code under similar non-Free licenses.
Comment 3 Andrew Overholt 2007-06-21 15:05:58 EDT
Sadly, much of the java world has typically been poor with licence checking and
code copying.
Comment 4 Anthony Green 2007-06-22 09:58:55 EDT
The source contains a text file that tries to justify the sun licensed code.  I
don't have time to sort all this out, so I intend to EOL itext and rssowl in
Extras and F7.  If somebody wants to dig through the licensing issues then they
should feel free to take these packages over.  overholt tells me that rssowl2
doesn't require itext, so it looks like it can return in Fedora 8. 
Comment 5 Anthony Green 2007-06-22 10:54:50 EDT
I've just completed the EOL process and am closing this bug.

Note You need to log in before you can comment on or make changes to this bug.