Re: Bug#856652: RFS: xpdf/3.0.4.real-4
On Wed, 2017-03-08 at 07:41 -0500, The Wanderer wrote:
> On 2017-03-08 at 00:55, Svante Signell wrote:
>
> > On Tue, 2017-03-07 at 22:43 +0100, Moritz Muehlenhoff wrote:
> >
> > > On Tue, Mar 07, 2017 at 08:17:08AM +0100, Svante Signell wrote:
> > >
> > > > I don't see where your concerns regarding security are, please
> > > > explain.
> > >
> > > Your package can't enter the archive since this would require to
> > > fix all security issues in poppler/xpdf twice instead of just once
> > > in the library package.
> >
> > I still don't get it. The proposed package _doesn't_ depend on
> > poppler any more. If you have problems with previous xpdf+poppler
> > versions up to 3.04-4, remove these from the archive then!
>
> What about all the packages which depend on poppler and _aren't_ xpdf?
I did not propose to remove all libpoppler-based packages. I meant the xpdf
versions depending on libpoppler.
Sorry if there has been any confusion about that.
Reply to: