= phenomenon =
I inadvertently uploaded a file (thinking fedpkg new-sources was local unless you push/build) to the lookaside cache which may contain patent-encumbered pieces.

= background analysis =
This was during a local test build of openssl with ecdh, using the unmodified upstream source tarball. We ship a modified source tarball openssl-1.0.0e-usa.tar.bz2, even though our spec can be (mis)understood to clear out the upstream sources during prep. (There are differing views here.)

= implementation recommendation =
Please remove

7040b89c4c58c7a1016c0dfa6e821c86 openssl-1.0.0e.tar.gz

from the lookaside cache. (It is the official tarball from openssl.org, but not the one used in official Fedora packages.)