Bug#316546: marked as done (tetex-bin: Please use libpoppler instead of a copy of xpdf code)
Your message dated Tue, 13 Dec 2005 09:47:09 -0800
with message-id <E1EmEF3-0008M9-Th@spohr.debian.org>
and subject line Bug#316546: fixed in tetex-bin 3.0-12
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 1 Jul 2005 17:14:48 +0000
>From frank@kuesterei.ch Fri Jul 01 10:14:48 2005
Return-path: <frank@kuesterei.ch>
Received: from idmailgate1.unizh.ch [130.60.68.105]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DoP6F-00075I-00; Fri, 01 Jul 2005 10:14:48 -0700
Received: from localhost.localdomain ([130.60.169.112])
by idmailgate1.unizh.ch (8.13.1/8.13.1/SuSE Linux 0.7) with ESMTP id j61HEjlG016843
for <submit@bugs.debian.org>; Fri, 1 Jul 2005 19:14:45 +0200
Received: from localhost
([127.0.0.1] helo=localhost.localdomain ident=frank)
by localhost.localdomain with esmtp (Exim 4.50)
id 1DoP6C-0006QH-RB
for submit@bugs.debian.org; Fri, 01 Jul 2005 19:14:44 +0200
From: =?iso-8859-1?q?Frank_K=FCster?= <frank@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: tetex-bin: Please use libpoppler instead of a copy of xpdf code
X-Debbugs-CC: Frank =?iso-8859-1?q?K=FCster?= <frank@debian.org>
X-Attribution: fant
X-Ehrenamt: http://www.langau.de
Date: Fri, 01 Jul 2005 19:14:44 +0200
Message-ID: <877jgaa1ob.fsf@alhambra.kuesterei.ch>
User-Agent: Gnus/5.1007 (Gnus v5.10.7) Emacs/21.4 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
X-Virus-Scanned: by amavisd-new
Delivered-To: submit@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-11.0 required=4.0 tests=BAYES_00,HAS_PACKAGE,
X_DEBBUGS_CC autolearn=ham version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
Package: tetex-bin
Version: 3.0-4
Severity: normal
pdftex uses code from xpdf to parse PDF files. The code is copied to
the source tree and statically linked, and the different versions of
xpdf code proved to be a security nightmare.
Now that we have libpoppler in testing and unstable, we should really
try whether pdftex (and maybe also other programs?) can be compiled and
used with dynamic linking against libpoppler.
Does anybody on the list feel like trying this?
TIA, Frank
-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.6.8-2-386
Locale: LANG=3Dde_DE@euro, LC_CTYPE=3Dde_DE@euro (charmap=3DISO-8859-15)
Versions of packages tetex-bin depends on:
ii debconf [debconf-2.0] 1.4.30.13 Debian configuration managemen=
t sy
ii debianutils 2.8.4 Miscellaneous utilities specif=
ic t
ii dpkg 1.10.28 Package maintenance system for=
Deb
ii ed 0.2-20 The classic unix line editor
ii libc6 2.3.2.ds1-22 GNU C Library: Shared librarie=
s an
ii libgcc1 1:3.4.3-13 GCC support library
ii libice6 4.3.0.dfsg.1-14 Inter-Client Exchange library
ii libkpathsea4 3.0-4 path search library for teTeX =
(run
ii libpaper1 1.1.14-3 Library for handling paper cha=
ract
ii libpng12-0 1.2.8rel-1 PNG library - runtime
ii libsm6 4.3.0.dfsg.1-14 X Window System Session Manage=
ment
ii libstdc++5 1:3.3.5-13 The GNU Standard C++ Library v3
ii libt1-5 5.0.2-3 Type 1 font rasterizer library=
- r
ii libx11-6 4.3.0.dfsg.1-14 X Window System protocol clien=
t li
ii libxaw7 4.3.0.dfsg.1-14 X Athena widget set library
ii libxext6 4.3.0.dfsg.1-14 X Window System miscellaneous =
exte
ii libxmu6 4.3.0.dfsg.1-14 X Window System miscellaneous =
util
ii libxpm4 4.3.0.dfsg.1-14 X pixmap library
ii libxt6 4.3.0.dfsg.1-14 X Toolkit Intrinsics
ii mime-support 3.28-1 MIME files 'mime.types' & 'mai=
lcap
ii perl 5.8.4-8 Larry Wall's Practical Extract=
ion=20
ii sed 4.1.2-8 The GNU sed stream editor
ii tetex-base 3.0-3.4 Basic library files of teTeX
ii ucf 1.17 Update Configuration File: pre=
serv
ii xlibs 4.3.0.dfsg.1-14 X Keyboard Extension (XKB) con=
figu
ii zlib1g 1:1.2.2-4 compression library - runtime
-- debconf information:
tetex-bin/updmap-failed:
tetex-bin/hyphen: french[=3Dpatois], ngerman[=3Dnaustrian-neue_Rechtschre=
ibung]
tetex-bin/oldcfg: true
* tetex-bin/upd_map: true
tetex-bin/cnf_name:
* tetex-bin/fmtutil: true
* tetex-bin/use_debconf: false
tetex-bin/fmtutil-failed:
* tetex-bin/groupname: users
* tetex-bin/userperm: false
* tetex-bin/groupperm: true
* tetex-bin/lsr-perms: true
--=20
Frank K=FCster
Inst. f. Biochemie der Univ. Z=FCrich
Debian Developer
---------------------------------------
Received: (at 316546-close) by bugs.debian.org; 13 Dec 2005 17:51:00 +0000
>From katie@ftp-master.debian.org Tue Dec 13 09:51:00 2005
Return-path: <katie@ftp-master.debian.org>
Received: from katie by spohr.debian.org with local (Exim 4.50)
id 1EmEF3-0008M9-Th; Tue, 13 Dec 2005 09:47:09 -0800
From: =?utf-8?q?Frank_K=C3=BCster?= <frank@debian.org>
To: 316546-close@bugs.debian.org
X-Katie: $Revision: 1.60 $
Subject: Bug#316546: fixed in tetex-bin 3.0-12
Message-Id: <E1EmEF3-0008M9-Th@spohr.debian.org>
Sender: Archive Administrator <katie@ftp-master.debian.org>
Date: Tue, 13 Dec 2005 09:47:09 -0800
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level:
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
autolearn=no version=2.60-bugs.debian.org_2005_01_02
Source: tetex-bin
Source-Version: 3.0-12
We believe that the bug you reported is fixed in the latest version of
tetex-bin, which is due to be installed in the Debian FTP archive:
libkpathsea4-dev_3.0-12_i386.deb
to pool/main/t/tetex-bin/libkpathsea4-dev_3.0-12_i386.deb
libkpathsea4_3.0-12_i386.deb
to pool/main/t/tetex-bin/libkpathsea4_3.0-12_i386.deb
tetex-bin_3.0-12.diff.gz
to pool/main/t/tetex-bin/tetex-bin_3.0-12.diff.gz
tetex-bin_3.0-12.dsc
to pool/main/t/tetex-bin/tetex-bin_3.0-12.dsc
tetex-bin_3.0-12_i386.deb
to pool/main/t/tetex-bin/tetex-bin_3.0-12_i386.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 316546@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Frank Küster <frank@debian.org> (supplier of updated tetex-bin package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Tue, 13 Dec 2005 17:32:37 +0100
Source: tetex-bin
Binary: tetex-bin libkpathsea4-dev libkpathsea4
Architecture: source i386
Version: 3.0-12
Distribution: unstable
Urgency: low
Maintainer: teTeX maintainers <debian-tetex-maint@lists.debian.org>
Changed-By: Frank Küster <frank@debian.org>
Description:
libkpathsea4 - path search library for teTeX (runtime part)
libkpathsea4-dev - path search library for teTeX (devel part)
tetex-bin - The teTeX binary files
Closes: 316546
Changes:
tetex-bin (3.0-12) unstable; urgency=low
.
* Because of the frequent security issues with xpdf, we do no longer use
the included xpdf code, but libpoppler instead. Many thanks to Martin Pitt
<martin.pitt@canonical.com> for the patch (closes: #316546) [frank]
* Add debian/patches/patch-poppler to build the two files that require xpdf
(texk/web2c/pdftexdir/{pdftosrc.cc,pdftoepdf.cc}) against poppler:
- Adapt include file paths.
- s/GString/GooString/ (poppler change to not conflict with glib).
- Adapt GlobalParams() constructor.
- web2c/pdftexdir/depend.mk: Removed, and re-generated with 'make depend'
to get rid of all the zlib and xpdf references to the shipped sources.
- configure.in: Set needs_libxpdf=no even when building with pdftex, to
avoid trying to build the internal xpdf copy.
- configure: Stripped down changes generated by running autoconf 2.13.
* Removed xpdf security patches, they are not necessary any more.
* debian/control: Build-Depend on libpoppler-dev.
* debian/rules.in:
- Build with XXCFLAGS='-I/usr/include/poppler' and LDFLAGS='-lpoppler'.
- Remove libs/xpdf and libs/zlib before building, just to make sure that
we really don't use it.
- Clean debian/latex.info on clean to be able to build the
source package after building binaries.
* Add a build-dependency on libjpeg62-dev - pdfetex was linked against
it even in older versions, but apparently the development library is
no longer pulled in by other build-deps.
Files:
4ab87b04767675ad325e94918308f026 1043 tex optional tetex-bin_3.0-12.dsc
349f0e6813c120388015254814ba14d4 129932 tex optional tetex-bin_3.0-12.diff.gz
0a5eaad332054b37229325468a259df6 3491262 tex optional tetex-bin_3.0-12_i386.deb
96bc99ded4769efc05b906864a0f8b09 74672 libs optional libkpathsea4_3.0-12_i386.deb
54ff10bc8d6eabdd37e52d4ea1ef08f9 70024 libdevel optional libkpathsea4-dev_3.0-12_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
iD8DBQFDnwUi+xs9YyJS+hoRArGKAJwKs7YViItn1/ECZmwa/xgen0fsUACeLI4f
oRvZdvC9yIHm/Lgx9EK5nMI=
=RrpQ
-----END PGP SIGNATURE-----
Reply to: