[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Remove giflib from testing



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

giflib 3.x has a nasty security bug (#395382). I uploaded giflib 4.x to
NEW two days ago, which fixed, amongst others, this bug.

Since, oviously, giflib 3.x and giflib 4.x are not compatible, one would
expect that a transition is needed, but that isn't the case. Since
giflib was until very recently considered to violate patents, no
package[0] does declare a relation to giflib, all packages are using
libungif instead. Now, that all patent claims are outdated, I'm
re-introducing giflib, harmonize giflib and libungif, and start a
tansition after etch release.

But in the meantime while waiting for NEW, I recommend to remove giflib
from testing.

Regards,
Daniel

[0]

- --
Address:        Daniel Baumann, Burgunderstrasse 3, CH-4562 Biberist
Email:          daniel.baumann@panthera-systems.net
Internet:       http://people.panthera-systems.net/~daniel-baumann/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFTQUO+C5cwEsrK54RAvYmAJ0U3RP15rUCo/bPdZp/+E5K4FNBKACfXkpx
66518x/6YqoyMKWG+3F9vic=
=GeIc
-----END PGP SIGNATURE-----



Reply to: