Bug#856652: RFS: xpdf/3.0.4.real-4

2017-03-07 Thread Svante Signell
On Tue, 2017-03-07 at 22:43 +0100, Moritz Muehlenhoff wrote: > On Tue, Mar 07, 2017 at 08:17:08AM +0100, Svante Signell wrote: > > I don't see where your concerns regarding security are, please explain. > > Your package can't enter the archive since this would require to fix > all security issues

Bug#855439: RFS: cvm/0.97

2017-03-07 Thread Dmitry Bogatov
control: tag -1 -moreinfo [2017-03-06 20:54] Sean Whitton > Dear Dmitry, > > On Sat, Feb 18, 2017 at 10:23:46AM +0300, Dmitry Bogatov wrote: > > Note, that this is not full-scale modernization of package. It is just > > a NMU, required for libbg1 -> libbg2 transition. > > Could you explain the b

Bug#856910: RFS: inotify-tools/3.14-3

2017-03-07 Thread Dmitry Bogatov
control: tags -1 -moreinfo [2017-03-06 20:46] Sean Whitton > - Your conversion of d/copyright has lost some information, by merging > the stanzas for McGovern and McCutchan. If you use two separate > stanzas the conversion would not be lossy. Fixed. > - In your changelog you wrote that yo

Re: Bug#856652: RFS: xpdf/3.0.4.real-4

2017-03-07 Thread Sean Whitton
Dear Svante, On Tue, Mar 07, 2017 at 03:05:54PM +0100, Svante Signell wrote: > In my opinion, the code bases have diverged too far, yes. The fact that the code bases have diverged too far for the current maintenance practice to continue fails to entail that they have diverged too far that we woul

Bug#856652: RFS: xpdf/3.0.4.real-4

2017-03-07 Thread Moritz Muehlenhoff
On Tue, Mar 07, 2017 at 08:17:08AM +0100, Svante Signell wrote: > I don't see where your concerns regarding security are, please explain. Your package can't enter the archive since this would require to fix all security issues in poppler/xpdf twice instead of just once in the library package. Che

Bug#856652: RFS: xpdf/3.0.4.real-4

2017-03-07 Thread Sean Whitton
Dear Svante, On Tue, Mar 07, 2017 at 08:17:08AM +0100, Svante Signell wrote: > I don't see where your concerns regarding security are, please explain. > Reading > more about the bugs in xpdf, the problems are mainly created by the use of > poppler as a backend, not when using the _real_ upstream

Bug#857053: RFS: kcptun/20170303+ds-1~exp1 [ITP] -- Simple UDP Tunnel Based On KCP

2017-03-07 Thread Roger Shimizu
Package: sponsorship-requests Severity: wishlist X-Debbugs-Cc: pkg-go-maintain...@lists.alioth.debian.org, daniel820...@gmail.com, rogershim...@gmail.com Dear mentors, I am looking for a sponsor for my package "kcptun" * Package name: kcptun Version : 20170303+ds-1~exp1 Upstr

Bug#857052: RFS: opencryptoki/3.6.2+dfsg-2 [ITA]

2017-03-07 Thread Paulo Ricardo Paz Vital
Package: sponsorship-requests Severity: normal Dear mentors, I am looking for a sponsor for my package "opencryptoki" Package name: opencryptoki Version : 3.6.2+dfsg-2 Upstream Author : none URL : http://opencryptoki.sourceforge.net/ License : CPL Section

Re: Bug#856652: RFS: xpdf/3.0.4.real-4

2017-03-07 Thread Svante Signell
On Tue, 2017-03-07 at 08:30 -0500, The Wanderer wrote: > On 2017-03-07 at 08:12, Svante Signell wrote: ... Sorry, I still don't get it: - Which packages still depend on > > poppler, unless via xpdf? The ones directly dependant on poppler are > > not affected. > > Yes, they are; if a newly-discover

Re: Bug#856652: RFS: xpdf/3.0.4.real-4

2017-03-07 Thread Gianfranco Costamagna
Hello, >>> Maybe I don't understand. The version of xpdf I'm proposing is no >>> longer dependent on poppler. So why are you talking about >>> poppler? >> Probably I don't get it either, but there is the EmbeddedCodeCopies repository, where you can list such "exceptions" just in case https://w

Re: Bug#856652: RFS: xpdf/3.0.4.real-4

2017-03-07 Thread The Wanderer
On 2017-03-07 at 08:12, Svante Signell wrote: > On Tue, 2017-03-07 at 06:49 -0500, The Wanderer wrote: > >> On 2017-03-04 at 14:19, Svante Signell wrote: > ... >>> Maybe I don't understand. The version of xpdf I'm proposing is no >>> longer dependent on poppler. So why are you talking about >>> p

Re: Bug#856652: RFS: xpdf/3.0.4.real-4

2017-03-07 Thread Svante Signell
On Tue, 2017-03-07 at 06:49 -0500, The Wanderer wrote: > On 2017-03-04 at 14:19, Svante Signell wrote: ... > > Maybe I don't understand. The version of xpdf I'm proposing is no  > > longer dependent on poppler. So why are you talking about poppler? > > Because other packages do still depend on pop

Re: Bug#856652: RFS: xpdf/3.0.4.real-4

2017-03-07 Thread The Wanderer
On 2017-03-04 at 14:19, Svante Signell wrote: > On Sat, 2017-03-04 at 11:49 -0700, Sean Whitton wrote: > >> Dear Svante, >> >> I agree with you that a poppler-based xpdf is not maintainable >> until and unless xpdf upstream switches to poppler. However, it is >> not clear to me why we shouldn't

Bug#857033: RFS: golang-github-xtaci-smux/1.0.4+git20170307+ds-1~exp1 [ITP] -- Simple Multiplexing for golang

2017-03-07 Thread Roger Shimizu
Package: sponsorship-requests Severity: wishlist X-Debbugs-Cc: pkg-go-maintain...@lists.alioth.debian.org, daniel820...@gmail.com, rogershim...@gmail.com Dear mentors, I am looking for a sponsor for my package "golang-github-xtaci-smux". Previous upload was rejected by ftpmaster, with following