package phpwiki
tag 505043 + help
thanks

On Sat, Nov 8, 2008 at 7:39 PM, Joey Schulze<[email protected]> wrote:
> Package: phpwiki
> Version: n/a
>
> It seems that phpwiki distributes an embedded copy of fpdf which is
> included in Debian as system-wide package php-fpdf.  From a security point
> of view it is unacceptable to distribute several copies of the same library,
> thus, please switch to using the system-wide library.

The version of fpdf shipped within PHPwiki appears to be 0.52 vs the
version 0.53 in the debian php-fpdf package. There appears to have
been quite some code reorganisation within fpdf between these two
revisions so it's not immediately apparent if there are any changes
that would be relevant to the interface between fpdf and PHPwiki.

More importantly however, the PDF generation functionality in PHPwiki
in the default configuration of the package appears to be broken (fpdf
complains about data already output so it is unable to set the
Content-Type headers), making it difficult to test whether swapping
out the included fpdf for a packaged copy works at all.

I'm tagging this bug as help needed as we need someone to determine if
the PDF generation breakage is our fault, or an upstream bug and then
act accordingly.

-- 
Matt Brown
[email protected]
Mob +353 86 608 7117 www.mattb.net.nz



--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to