[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#316546: marked as done (tetex-bin: Please use libpoppler instead of a copy of xpdf code)

Your message dated Tue, 13 Dec 2005 09:47:09 -0800
with message-id <E1EmEF3-0008M9-Th@spohr.debian.org>
and subject line Bug#316546: fixed in tetex-bin 3.0-12
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

Received: (at submit) by bugs.debian.org; 1 Jul 2005 17:14:48 +0000
>From frank@kuesterei.ch Fri Jul 01 10:14:48 2005
Return-path: <frank@kuesterei.ch>
Received: from idmailgate1.unizh.ch [] 
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1DoP6F-00075I-00; Fri, 01 Jul 2005 10:14:48 -0700
Received: from localhost.localdomain ([])
	by idmailgate1.unizh.ch (8.13.1/8.13.1/SuSE Linux 0.7) with ESMTP id j61HEjlG016843
	for <submit@bugs.debian.org>; Fri, 1 Jul 2005 19:14:45 +0200
Received: from localhost
	([] helo=localhost.localdomain ident=frank)
	by localhost.localdomain with esmtp (Exim 4.50)
	id 1DoP6C-0006QH-RB
	for submit@bugs.debian.org; Fri, 01 Jul 2005 19:14:44 +0200
From: =?iso-8859-1?q?Frank_K=FCster?= <frank@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: tetex-bin: Please use libpoppler instead of a copy of xpdf code
X-Debbugs-CC: Frank =?iso-8859-1?q?K=FCster?= <frank@debian.org>
X-Attribution: fant
X-Ehrenamt: http://www.langau.de
Date: Fri, 01 Jul 2005 19:14:44 +0200
Message-ID: <877jgaa1ob.fsf@alhambra.kuesterei.ch>
User-Agent: Gnus/5.1007 (Gnus v5.10.7) Emacs/21.4 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
X-Virus-Scanned: by amavisd-new
Delivered-To: submit@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-11.0 required=4.0 tests=BAYES_00,HAS_PACKAGE,
	X_DEBBUGS_CC autolearn=ham version=2.60-bugs.debian.org_2005_01_02

Package: tetex-bin
Version: 3.0-4
Severity: normal

pdftex uses code from xpdf to parse PDF files.  The code is copied to
the source tree and statically linked, and the different versions of
xpdf code proved to be a security nightmare.

Now that we have libpoppler in testing and unstable, we should really
try whether pdftex (and maybe also other programs?) can be compiled and
used with dynamic linking against libpoppler.

Does anybody on the list feel like trying this?

TIA, Frank

-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.6.8-2-386
Locale: LANG=3Dde_DE@euro, LC_CTYPE=3Dde_DE@euro (charmap=3DISO-8859-15)

Versions of packages tetex-bin depends on:
ii  debconf [debconf-2.0]       Debian configuration managemen=
t sy
ii  debianutils              2.8.4           Miscellaneous utilities specif=
ic t
ii  dpkg                     1.10.28         Package maintenance system for=
ii  ed                       0.2-20          The classic unix line editor
ii  libc6                    2.3.2.ds1-22    GNU C Library: Shared librarie=
s an
ii  libgcc1                  1:3.4.3-13      GCC support library
ii  libice6                  4.3.0.dfsg.1-14 Inter-Client Exchange library
ii  libkpathsea4             3.0-4           path search library for teTeX =
ii  libpaper1                1.1.14-3        Library for handling paper cha=
ii  libpng12-0               1.2.8rel-1      PNG library - runtime
ii  libsm6                   4.3.0.dfsg.1-14 X Window System Session Manage=
ii  libstdc++5               1:3.3.5-13      The GNU Standard C++ Library v3
ii  libt1-5                  5.0.2-3         Type 1 font rasterizer library=
 - r
ii  libx11-6                 4.3.0.dfsg.1-14 X Window System protocol clien=
t li
ii  libxaw7                  4.3.0.dfsg.1-14 X Athena widget set library
ii  libxext6                 4.3.0.dfsg.1-14 X Window System miscellaneous =
ii  libxmu6                  4.3.0.dfsg.1-14 X Window System miscellaneous =
ii  libxpm4                  4.3.0.dfsg.1-14 X pixmap library
ii  libxt6                   4.3.0.dfsg.1-14 X Toolkit Intrinsics
ii  mime-support             3.28-1          MIME files 'mime.types' & 'mai=
ii  perl                     5.8.4-8         Larry Wall's Practical Extract=
ii  sed                      4.1.2-8         The GNU sed stream editor
ii  tetex-base               3.0-3.4         Basic library files of teTeX
ii  ucf                      1.17            Update Configuration File: pre=
ii  xlibs                    4.3.0.dfsg.1-14 X Keyboard Extension (XKB) con=
ii  zlib1g                   1:1.2.2-4       compression library - runtime

-- debconf information:
  tetex-bin/hyphen: french[=3Dpatois], ngerman[=3Dnaustrian-neue_Rechtschre=
  tetex-bin/oldcfg: true
* tetex-bin/upd_map: true
* tetex-bin/fmtutil: true
* tetex-bin/use_debconf: false
* tetex-bin/groupname: users
* tetex-bin/userperm: false
* tetex-bin/groupperm: true
* tetex-bin/lsr-perms: true

Frank K=FCster
Inst. f. Biochemie der Univ. Z=FCrich
Debian Developer

Received: (at 316546-close) by bugs.debian.org; 13 Dec 2005 17:51:00 +0000
>From katie@ftp-master.debian.org Tue Dec 13 09:51:00 2005
Return-path: <katie@ftp-master.debian.org>
Received: from katie by spohr.debian.org with local (Exim 4.50)
	id 1EmEF3-0008M9-Th; Tue, 13 Dec 2005 09:47:09 -0800
From: =?utf-8?q?Frank_K=C3=BCster?= <frank@debian.org>
To: 316546-close@bugs.debian.org
X-Katie: $Revision: 1.60 $
Subject: Bug#316546: fixed in tetex-bin 3.0-12
Message-Id: <E1EmEF3-0008M9-Th@spohr.debian.org>
Sender: Archive Administrator <katie@ftp-master.debian.org>
Date: Tue, 13 Dec 2005 09:47:09 -0800
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
	autolearn=no version=2.60-bugs.debian.org_2005_01_02

Source: tetex-bin
Source-Version: 3.0-12

We believe that the bug you reported is fixed in the latest version of
tetex-bin, which is due to be installed in the Debian FTP archive:

  to pool/main/t/tetex-bin/libkpathsea4-dev_3.0-12_i386.deb
  to pool/main/t/tetex-bin/libkpathsea4_3.0-12_i386.deb
  to pool/main/t/tetex-bin/tetex-bin_3.0-12.diff.gz
  to pool/main/t/tetex-bin/tetex-bin_3.0-12.dsc
  to pool/main/t/tetex-bin/tetex-bin_3.0-12_i386.deb

A summary of the changes between this version and the previous one is

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 316546@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
Frank Küster <frank@debian.org> (supplier of updated tetex-bin package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)

Hash: SHA1

Format: 1.7
Date: Tue, 13 Dec 2005 17:32:37 +0100
Source: tetex-bin
Binary: tetex-bin libkpathsea4-dev libkpathsea4
Architecture: source i386
Version: 3.0-12
Distribution: unstable
Urgency: low
Maintainer: teTeX maintainers <debian-tetex-maint@lists.debian.org>
Changed-By: Frank Küster <frank@debian.org>
 libkpathsea4 - path search library for teTeX (runtime part)
 libkpathsea4-dev - path search library for teTeX (devel part)
 tetex-bin  - The teTeX binary files
Closes: 316546
 tetex-bin (3.0-12) unstable; urgency=low
   * Because of the frequent security issues with xpdf, we do no longer use
     the included xpdf code, but libpoppler instead. Many thanks to Martin Pitt
     <martin.pitt@canonical.com> for the patch (closes: #316546) [frank]
   * Add debian/patches/patch-poppler to build the two files that require xpdf
     (texk/web2c/pdftexdir/{pdftosrc.cc,pdftoepdf.cc}) against poppler:
     - Adapt include file paths.
     - s/GString/GooString/ (poppler change to not conflict with glib).
     - Adapt GlobalParams() constructor.
     - web2c/pdftexdir/depend.mk: Removed, and re-generated with 'make depend'
       to get rid of all the zlib and xpdf references to the shipped sources.
     - configure.in: Set needs_libxpdf=no even when building with pdftex, to
       avoid trying to build the internal xpdf copy.
     - configure: Stripped down changes generated by running autoconf 2.13.
   * Removed xpdf security patches, they are not necessary any more.
   * debian/control: Build-Depend on libpoppler-dev.
   * debian/rules.in:
     - Build with XXCFLAGS='-I/usr/include/poppler' and LDFLAGS='-lpoppler'.
     - Remove libs/xpdf and libs/zlib before building, just to make sure that
       we really don't use it.
     - Clean debian/latex.info on clean to be able to build the
       source package after building binaries.
   * Add a build-dependency on libjpeg62-dev - pdfetex was linked against
     it even in older versions, but apparently the development library is
     no longer pulled in by other build-deps.
 4ab87b04767675ad325e94918308f026 1043 tex optional tetex-bin_3.0-12.dsc
 349f0e6813c120388015254814ba14d4 129932 tex optional tetex-bin_3.0-12.diff.gz
 0a5eaad332054b37229325468a259df6 3491262 tex optional tetex-bin_3.0-12_i386.deb
 96bc99ded4769efc05b906864a0f8b09 74672 libs optional libkpathsea4_3.0-12_i386.deb
 54ff10bc8d6eabdd37e52d4ea1ef08f9 70024 libdevel optional libkpathsea4-dev_3.0-12_i386.deb

Version: GnuPG v1.4.1 (GNU/Linux)


Reply to: