[
Date Prev
][
Date Next
] [
Thread Prev
][
Thread Next
] [
Date Index
] [
Thread Index
]
Re: upload leptonlib
To
: "Santiago R.R." <
santiagorr@riseup.net
>
Cc
: Debian LTS <
debian-lts@lists.debian.org
>,
leptonlib@packages.debian.org
,
team@security.debian.org
Subject
: Re: upload leptonlib
From
: Jeff Breidenbach <
jeff@jab.org
>
Date
: Mon, 26 Feb 2018 10:55:28 -0800
Message-id
: <
[🔎]
CAHjiUbpAi7PTZ0970JVfuT5wzxV0j9iE_=Of=0uwdETDg6XtUw@mail.gmail.com
>
In-reply-to
: <
[🔎]
20180223195856.GA3022@novelo
>
References
: <
[🔎]
1518730488.2617.129.camel@decadent.org.uk
> <
[🔎]
87mv08iv61.fsf@curie.anarc.at
> <
[🔎]
1518902899.2617.156.camel@decadent.org.uk
> <
[🔎]
20180222062619.uasr4ryjd3ndvqqe@lorien.valinor.li
> <
[🔎]
1519317496.2617.248.camel@decadent.org.uk
> <
[🔎]
20180222193433.GA6254@eldamar.local
> <
[🔎]
CAHjiUbpiM7rgOc7Thv3OYWSMc2uSrFhZTsdyCHowUuKyV3o5sw@mail.gmail.com
> <
[🔎]
CAHjiUbrjPNWu-J2L+6kD8Z26RzTXa0KYH+69OMvTwehAThxWDg@mail.gmail.com
> <
[🔎]
20180223174251.fkrc7zxxn52unx2k@localhost.localdomain
> <
[🔎]
CAHjiUbpSCfTh_wjNfkjNcy7FOUDH-Y85ZprYdgtOHv0HW8TFRg@mail.gmail.com
> <
[🔎]
20180223195856.GA3022@novelo
>
>Was upstream's position also to remove those binaries?
Yes.
>Upstream was unable to provide a patch?
Yes. Upstream decided that it was not worth the time to make a patch.
Leptonica is a large image processing library. It also contains source code
for many (over 200) example programs that use the library. From these example
programs, a small number (about 10) are built and ship as part of the leptonica-progs
binary package.
Bug #830660 noticed that some of these programs were insecure. The affected
programs were not very important, and my best guess is nobody uses them. So
after discussion with upstream, I removed them from the Debian package. Because
the programs are probably not used, I don't have a strong opinion about what
happens with Wheezy.
Does this help?
Reply to:
debian-lts@lists.debian.org
Jeff Breidenbach (on-list)
Jeff Breidenbach (off-list)
Follow-Ups
:
Re: upload leptonlib
From:
"Santiago R.R." <santiagorr@riseup.net>
References
:
Re: upload leptonlib
From:
Ben Hutchings <ben@decadent.org.uk>
Re: upload leptonlib
From:
Antoine Beaupré <anarcat@orangeseeds.org>
Re: upload leptonlib
From:
Ben Hutchings <ben@decadent.org.uk>
Re: upload leptonlib
From:
Salvatore Bonaccorso <carnil@debian.org>
Re: upload leptonlib
From:
Ben Hutchings <ben@decadent.org.uk>
Re: upload leptonlib
From:
Salvatore Bonaccorso <carnil@debian.org>
Re: upload leptonlib
From:
Jeff Breidenbach <jeff@jab.org>
Re: upload leptonlib
From:
Jeff Breidenbach <jeff@jab.org>
Re: upload leptonlib
From:
"Santiago R.R." <santiagorr@riseup.net>
Re: upload leptonlib
From:
Jeff Breidenbach <jeff@jab.org>
Re: upload leptonlib
From:
"Santiago R.R." <santiagorr@riseup.net>
Prev by Date:
Re: Better communication about spectre/meltdown
Next by Date:
Re: Better communication about spectre/meltdown
Previous by thread:
Re: upload leptonlib
Next by thread:
Re: upload leptonlib
Index(es):
Date
Thread