Re: Bug#401969: please build using hunspell
On Fri, Dec 08, 2006 at 10:32:50PM +0100, Mike Hommey wrote: > How does the security team feel about having to rebuild iceape, > iceweasel, icedove (you forgot to file a bug on icedove), OOo and enchant > if there happens to be a security bug in hunspell ? In general having multiple packages needing a rebuild for a single security fix is a problem, and not something we'd like to have to deal with. (For a specific example think of the pdf/gs updates we had to make earlier in the year/last year. Lots of different programs with very similar code which didn't always get spotted at the same time.) A more recent example would be the links + elinks updates. Links was updated first then we updated elinks afterwards when we learnt there was shared code .. (Obvious in retrospect, but if there are a lot of packages which would require a rebuild keeping track of all of them can be difficult; especially if we don't know about it in advance.) Steve -- signature.asc Description: Digital signature
Re: Bug#401969: please build using hunspell
Rene Engelhard wrote: Davide Prina wrote: MySpell is obsolete. Please build against Hunspell, which is an improved version of MySpell retaining full backwards compatibility. That also would make the usage of hunspell-de-* in iceweasel possible. probably not so full backwards compatibility. Proof? for example this: ---8<--FILE a.aff-8<- SET ISO8859-15 TRY aioertnsclmdpgubzfvhàq'ACMSkBGPLxEyRTVòIODNwFéùèìjUZKHWJYQX SFX B Y 1 SFX B ere ono ere # p SFX p Y 2 SFX p o i o SFX p o e o ---8<-8<- ---8<--FILE a.dic-8<- 1 decidere/B ---8<-8<- ---8<--FILE a.txt-8<- decidere decidono decidoni decidone ---8<-8<- note that "decidere/B" must generate only "decidono" (with myspell), but hunspell generate also "decidoni" and "decidone" that are wrong Italian words. I have see that I can gain the same result with SFX B ere ono ere anystring p also if I write SFX B ere ono ere anystring abcdef than it is the same that write decidono/abcdef also Italian dictionary in Debian is a very old release ... so obsolete than a lot of people ask me to correct a lot of errors, errors that are already corrected in the last version. I think that Debian is the last GNU/Linux distro that have a so old Itailian dictionary version. The last Italian dictionary under GPL license can be downloaded from here (2.3 beta 23/07/2006): http://linguistico.sf.net/wiki/doku.php?id=dizionario_italiano I have reported a whishlist for that #329971 at Date: Sat, 24 Sep 2005 23:04:33 +0200 Irrelevant for this discussion. I can't add GPLed stuff to the package because it then would be GPL. The other dictionaries in the OOo source are LGPL, though. I don't have ask to add it to the OOo source, but to the myspell-it package. You can package it externally or make it build from the ispell one, but I will *not* include it in -dictionaries due it's being GPL. If I don't have mistake I intend -dictionaries as a Debian package interesting ... so you can neither include the German dictionary ... it is under GPL license and non-GPL for package that "support the OASIS Open Document Format for Office Applications and whose PRIMARY format for saving documents is the Open Document Format" I don't think icedove, iceweasel, ... respect this exception, so for all these the German dictionary is only GPL 2.0 or upper I think theare are lot of other dictionaries/thesaurus that have the same problem. I told that in the bug report that it's G`PL and can't add it. If you don't read it/understand it and then complain, well... where? when? querybts tell me: ---8<---8<---8<---8<---8< From: Rene Engelhard Subject: Re: Bug#329971: New Italian dictionary version available Date: Sat, 24 Sep 2005 23:45:45 +0200 [...] Aha. Hmm. And OOo 1.9.x/2.0 also contains only 2.1. Will look. When 1.9.x enters sid myspell-it will become 2.1 anyway and I'll look about updating the copy with 2.2. [...] Grüße/Regards, Rene ---8<---8<---8<---8<---8< note that the 2.2 version is GPL only Also the Italian thesaurus is only GPL and there is a recent version in Debian ... why? I have reported some hunspell bugs to Láló don't know if some can be security bugs). I don't know if they are already corrected (Lálóve told me: "I hope, I will solve the problem this month for OOo 2.1"). Doubt that, there's no new hunspell release and neither does OOo 2.1 correct a new hunspell AFAIS (or he fixed the OOo h unspell copy and forgot the normal one..) you can try the above example to check it Ciao Davide -- Dizionari: http://linguistico.sourceforge.net/wiki Client di posta: http://www.mozilla.org/products/thunderbird GNU/Linux User: 302090: http://counter.li.org Non autorizzo la memorizzazione del mio indirizzo su outlook
Re: Bug#401969: please build using hunspell
On Sat, Dec 09, 2006 at 01:13:27PM +0100, Rene Engelhard <[EMAIL PROTECTED]> wrote: > I do. There's hunspell dictionaries in Debian which have to conflict > against all mozillas... I fail to see why. Are the hunspell dictionaries in /usr/share/myspell/dicts or what ? Mike -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Bug#401969: please build using hunspell
Hi, Davide Prina wrote: > > MySpell is obsolete. > > Please build against Hunspell, which is an improved version of MySpell > > retaining full backwards compatibility. That also would make the usage > > of hunspell-de-* in iceweasel possible. > > probably not so full backwards compatibility. Proof? > also Italian dictionary in Debian is a very old release ... so obsolete > than a lot of people ask me to correct a lot of errors, errors that are > already corrected in the last version. > I think that Debian is the last GNU/Linux distro that have a so old > Itailian dictionary version. > > The last Italian dictionary under GPL license can be downloaded from > here (2.3 beta 23/07/2006): > http://linguistico.sf.net/wiki/doku.php?id=dizionario_italiano > > I have reported a whishlist for that #329971 at Date: Sat, 24 Sep 2005 > 23:04:33 +0200 Irrelevant for this discussion. I can't add GPLed stuff to the package because it then would be GPL. The other dictionaries in the OOo source are LGPL, though. You can package it externally or make it build from the ispell one, but I will *not* include it in -dictionaries due it's being GPL. I told that in the bug report that it's G`PL and can't add it. If you don't read it/understand it and then complain, well... > For Italian language there is also a surname dictionary, also it under > GPL, that can be found here: > http://linguistico.sf.net/wiki/doku.php?id=dizionario_cognomi_italiani GPL, too. See above. > I don't see the hurry to have hunspell used on all programs ... if it is I do. There's hunspell dictionaries in Debian which have to conflict against all mozillas... > I have reported some hunspell bugs to Láló don't know if some can > be security bugs). I don't know if they are already corrected (Lálóve > told me: "I hope, I will solve the problem this month for OOo 2.1"). Doubt that, there's no new hunspell release and neither does OOo 2.1 correct a new hunspell AFAIS (or he fixed the OOo h unspell copy and forgot the normal one..) No one claimed hunsppell hasn't got bugs but it's better than myspell overall. And it won't block usage of hunspell dictionaries in OOo. Gr??e/Regards, Ren? -- .''`. Ren? Engelhard -- Debian GNU/Linux Developer : :' : http://www.debian.org | http://people.debian.org/~rene/ `. `' [EMAIL PROTECTED] | GnuPG-Key ID: 248AEB73 `- Fingerprint: 41FA F208 28D4 7CA5 19BB 7AD9 F859 90B0 248A EB73 signature.asc Description: Digital signature
Re: Bug#401969: please build using hunspell
Hi, Mike Hommey wrote: > On Fri, Dec 08, 2006 at 10:58:11PM +0100, Rene Engelhard <[EMAIL PROTECTED]> > wrote: > > Mike Hommey wrote: > > > On Thu, Dec 07, 2006 at 11:26:34AM +0100, Rene Engelhard <[EMAIL > > > PROTECTED]> wrote: > > > > There's no big difference in using hunspell and myspell, except that > > > > hunspell dictionaries > > > > then will also work. And you show that hunspell is used so the security > > > > team knows > > > > that mozilla needs to be rebuilt (which probably won't happen, no one > > > > ever found a security bug > > > > in either hunspell or myspell). And in any case, there's already > > > > enchant and openoffice.org building > > > > with static hunspell (openoffice.org does build far longer than ice*) > > > > > > How does the security team feel about having to rebuild iceape, > > > iceweasel, icedove (you forgot to file a bug on icedove), OOo and enchant > > > > No, that would have been my next target (the source already is on my > > disk) > > > > > if there happens to be a security bug in hunspell ? > > > > I am sure there won't be, but if it happens it happens. There's some > > static libs in Debian where this is the case, afaik. Of course. not having > > to > > do that is better, but... > > > > > How do buildds feel to have to rebuild iceape, iceweasel, icedove, OOo > > > and enchant for every hunspell upload ? > > > > You don't have to. > > So when you fix bugs in hunspell, you want to leave the bugs in the > programs that are statically linked to it. How great. Bullshit. You are intrepreting stuff everytime I didn't say. Not every fix in the package/packaging needs a rebuild, neither does a fix only affecting the hunspell program and not the library. In the library case, you're right. Gr��e/Regards, Ren� -- .''`. Ren� Engelhard -- Debian GNU/Linux Developer : :' : http://www.debian.org | http://people.debian.org/~rene/ `. `' [EMAIL PROTECTED] | GnuPG-Key ID: 248AEB73 `- Fingerprint: 41FA F208 28D4 7CA5 19BB 7AD9 F859 90B0 248A EB73 signature.asc Description: Digital signature
Re: Bug#401969: please build using hunspell
Rene Engelhard wrote: > MySpell is obsolete. > Please build against Hunspell, which is an improved version of MySpell > retaining full backwards compatibility. That also would make the usage > of hunspell-de-* in iceweasel possible. probably not so full backwards compatibility. > [ The Problem is that hunspell-de-* is an improved version of the > MySpell dict for hunspell and it's working in OOo since it uses > Hunspell also Italian dictionary in Debian is a very old release ... so obsolete than a lot of people ask me to correct a lot of errors, errors that are already corrected in the last version. I think that Debian is the last GNU/Linux distro that have a so old Itailian dictionary version. The last Italian dictionary under GPL license can be downloaded from here (2.3 beta 23/07/2006): http://linguistico.sf.net/wiki/doku.php?id=dizionario_italiano I have reported a whishlist for that #329971 at Date: Sat, 24 Sep 2005 23:04:33 +0200 For Italian language there is also a surname dictionary, also it under GPL, that can be found here: http://linguistico.sf.net/wiki/doku.php?id=dizionario_cognomi_italiani I don't see the hurry to have hunspell used on all programs ... if it is so hard or impossible to have recent dictionaries in Debian that are other languages than English or maintainer mother language. Mike Hommey wrote: On Fri, Dec 08, 2006 at 10:58:11PM +0100, Rene Engelhard wrote: Mike Hommey wrote: if there happens to be a security bug in hunspell ? I am sure there won't be, but if it happens it happens. There's some static libs in Debian where this is the case, afaik. Of course. not having to do that is better, but... How do buildds feel to have to rebuild iceape, iceweasel, icedove, OOo and enchant for every hunspell upload ? You don't have to. So when you fix bugs in hunspell, you want to leave the bugs in the programs that are statically linked to it. How great. I have reported some hunspell bugs to László (I don't know if some can be security bugs). I don't know if they are already corrected (László have told me: "I hope, I will solve the problem this month for OOo 2.1"). For example hunspell can generate more strings or more time the same string than myspell starting from the same dictionary. For hunspell there isn't a program that expand all the dictionary, so it is very hard to know if it work as you expected. Ciao Davide
Re: Bug#401969: please build using hunspell
On Fri, Dec 08, 2006 at 10:58:11PM +0100, Rene Engelhard <[EMAIL PROTECTED]> wrote: > Mike Hommey wrote: > > On Thu, Dec 07, 2006 at 11:26:34AM +0100, Rene Engelhard <[EMAIL > > PROTECTED]> wrote: > > > There's no big difference in using hunspell and myspell, except that > > > hunspell dictionaries > > > then will also work. And you show that hunspell is used so the security > > > team knows > > > that mozilla needs to be rebuilt (which probably won't happen, no one > > > ever found a security bug > > > in either hunspell or myspell). And in any case, there's already enchant > > > and openoffice.org building > > > with static hunspell (openoffice.org does build far longer than ice*) > > > > How does the security team feel about having to rebuild iceape, > > iceweasel, icedove (you forgot to file a bug on icedove), OOo and enchant > > No, that would have been my next target (the source already is on my > disk) > > > if there happens to be a security bug in hunspell ? > > I am sure there won't be, but if it happens it happens. There's some > static libs in Debian where this is the case, afaik. Of course. not having to > do that is better, but... > > > How do buildds feel to have to rebuild iceape, iceweasel, icedove, OOo > > and enchant for every hunspell upload ? > > You don't have to. So when you fix bugs in hunspell, you want to leave the bugs in the programs that are statically linked to it. How great. Mike -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Bug#401969: please build using hunspell
Mike Hommey wrote: > On Thu, Dec 07, 2006 at 11:26:34AM +0100, Rene Engelhard <[EMAIL PROTECTED]> > wrote: > > There's no big difference in using hunspell and myspell, except that > > hunspell dictionaries > > then will also work. And you show that hunspell is used so the security > > team knows > > that mozilla needs to be rebuilt (which probably won't happen, no one ever > > found a security bug > > in either hunspell or myspell). And in any case, there's already enchant > > and openoffice.org building > > with static hunspell (openoffice.org does build far longer than ice*) > > How does the security team feel about having to rebuild iceape, > iceweasel, icedove (you forgot to file a bug on icedove), OOo and enchant No, that would have been my next target (the source already is on my disk) > if there happens to be a security bug in hunspell ? I am sure there won't be, but if it happens it happens. There's some static libs in Debian where this is the case, afaik. Of course. not having to do that is better, but... > How do buildds feel to have to rebuild iceape, iceweasel, icedove, OOo > and enchant for every hunspell upload ? You don't have to. Gr??e/Regards, Ren? -- .''`. Ren? Engelhard -- Debian GNU/Linux Developer : :' : http://www.debian.org | http://people.debian.org/~rene/ `. `' [EMAIL PROTECTED] | GnuPG-Key ID: 248AEB73 `- Fingerprint: 41FA F208 28D4 7CA5 19BB 7AD9 F859 90B0 248A EB73 signature.asc Description: Digital signature
Re: Bug#401969: please build using hunspell
On Thu, Dec 07, 2006 at 11:26:34AM +0100, Rene Engelhard <[EMAIL PROTECTED]> wrote: > There's no big difference in using hunspell and myspell, except that hunspell > dictionaries > then will also work. And you show that hunspell is used so the security team > knows > that mozilla needs to be rebuilt (which probably won't happen, no one ever > found a security bug > in either hunspell or myspell). And in any case, there's already enchant and > openoffice.org building > with static hunspell (openoffice.org does build far longer than ice*) How does the security team feel about having to rebuild iceape, iceweasel, icedove (you forgot to file a bug on icedove), OOo and enchant if there happens to be a security bug in hunspell ? How do buildds feel to have to rebuild iceape, iceweasel, icedove, OOo and enchant for every hunspell upload ? Mike -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
