RM: gpdf -- RoQA; orphaned, better alternatives
Package: ftp.debian.org
Severity: normal
* Junichi Uekawa <dancer@netfort.gr.jp> [2006-07-21 23:49]:
> I think having a security hole for more than a year is a reason to remove
> gpdf.
>
> evince seems to be a replacement, gpdf is deprecated.
* Martin Michlmayr <tbm@cyrius.com> wrote, on Sat, 22 Jul 2006:
> It should imho get orphaned first. BCCing the MIA people - what's up
> there anyway? Hasn't mechanix been inactive for ages?
On Sat, Aug 12, 2006, Moritz Muehlenhoff wrote:
> Hi,
> I noticed that gpdf has been orphaned as current Gnome has switched
> to evince as the PDF viewer. The problem is that gpdf still embeds
> a complete copy of the xpdf code base. xpdf has a poor security
> history and I expect more issues to pop up during the 30 months of
> Etch security support. Please port gpdf to poppler or remove it from
> the archive. The first option is straight-forward, as poppler is
> based on xpdf as well. (Porting pdftohtml to poppler took me only
> half an hour). However, I assume that removing it entirely might
> be the better option, as evince is now the standard PDF viewer.
Now that gpdf has been orphaned, I request its removal.
--
adn
Mohammed Adnène Trojette
Reply to: