Main inclusion request for libpdfrenderer-java

Bug #358249 reported by Steve Langasek
4
Affects Status Importance Assigned to Milestone
libitext-java (Ubuntu)
Fix Released
Undecided
Unassigned
Jaunty
Fix Released
Undecided
Unassigned
libpdfrenderer-java (Ubuntu)
Won't Fix
High
Unassigned
Jaunty
Won't Fix
High
Unassigned

Bug Description

Binary package hint: libpdfrenderer-java

libitext-java picked up a new build-dependency in jaunty that we want to have in main.

This is only used for building an extra libitext-rups-java which is not needed by anything else in main, so in the worst case we could disable building this binary package rather than promoting libitext-java; but this decision should be made soon so that we can clear this out for jaunty.

https://wiki.ubuntu.com/MainInclusionReportLibPDFRenderer-Java

Steve Langasek (vorlon)
Changed in libpdfrenderer-java (Ubuntu):
importance: Undecided → High
Changed in libpdfrenderer-java (Ubuntu Jaunty):
milestone: none → ubuntu-9.04
Revision history for this message
Kees Cook (kees) wrote :

PDF renderers not linked to poppler create too high a support burden. Vulnerabilities in PDF parsing are frequent and dangerous. This package should link directly to poppler rather than re-implement PDF parsing on its own.

Changed in libpdfrenderer-java (Ubuntu Jaunty):
status: New → Won't Fix
Revision history for this message
Steve Langasek (vorlon) wrote :

Dropping libitext-rups from the build. Changelog:

libitext-java (2.1.4-1ubuntu1) jaunty; urgency=low

  * Disable building of libitext-rups-java; we don't need another PDF
    renderer, they're subject to many security holes.

 -- Steve Langasek <email address hidden> Thu, 09 Apr 2009 18:23:00 +0000

Changed in libitext-java (Ubuntu Jaunty):
status: New → Fix Released
Steve Langasek (vorlon)
Changed in libpdfrenderer-java (Ubuntu):
status: New → Won't Fix
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.