I live in Hong Kong. I went to install the GNU encryption package, that is part of glibc, on my RedHat 5.2 machine. I dutifully downloaded it from a site outside the US. I then found it had already been installed as part of the standard RedHat distribution. Doesn't that mean you are breaking US law?
This is not a bug.