Re: xpdf code security, removal of pdftohtml
On Thu, Jun 19, 2008 at 05:08:17PM +0200, Philipp Kern wrote:
> On Fri, Jun 06, 2008 at 01:19:12PM +0200, Philipp Kern wrote:
> > On Sat, Jan 05, 2008 at 05:40:13PM +0100, Frederic Peters wrote:
> > > I am the maintainer of pdftohtml, it embeds code from xpdf, and can be
> > > replaced by pdftohtml from poppler-utils; this has been the case in sid
> > > for months (package got removed from sid/lenny in June) and nobody
> > > complained about compatibility problems using the new poppler code.
> > You uploaded pdftohtml to p-u and I accepted it very recently. Sadly it
> > causes xpdf to be removed from systems, because it has a strictly
> > versionned dependency on xpdf-utils. That package is provided by
> > poppler-utils, but the version numbers do not match up.
> >
> > So it would be appreciated if you could upload an xpdf version with that
> > dependency relaxed, or even converted to poppler-utils.
>
> I did prepare an upload. See the attached debdiff for details.
Why are you hacking xpdf to fix a relationship problem between
pdftohtml and poppler-utils? Neither of them are xpdf-utils.
Hamish
--
Hamish Moffatt VK3SB <hamish@debian.org> <hamish@cloud.net.au>
Reply to: