[DebianGIS-dev] Bug#603470: libmapnik0.7: package linked against broken external AGG

2010-11-15 Thread Francesco P. Lovergine
On Mon, Nov 15, 2010 at 03:45:01PM +0100, David Paleino wrote: It's a 2.3, at least from what agg/copying says. Seriously someone should consider an AGG fork from 2.4 which is something maybe mapserver folks already did. Francesco, do you know if such a fork has been officially

[DebianGIS-dev] Bug#603470: libmapnik0.7: package linked against broken external AGG

2010-11-15 Thread David Paleino
Dear Security and Release Teams, On Mon, 15 Nov 2010 12:07:56 +0100, Sven Geggus wrote: Francesco P. Lovergine schrieb am Montag, den 15. November um 11:19 Uhr: My best guessing is moving to the embedded copy if resulting issues are grave enough to compromise its use. There are

[DebianGIS-dev] Bug#603470: libmapnik0.7: package linked against broken external AGG

2010-11-15 Thread Francesco P. Lovergine
On Mon, Nov 15, 2010 at 06:44:11PM +0100, David Paleino wrote: - security team: would it be acceptable to use the embedded copy? Note also that AGG even is a template package for C++, so basically it is not something that one would consider a shlib. It should be considered as embedded by

[DebianGIS-dev] Bug#603470: libmapnik0.7: package linked against broken external AGG

2010-11-14 Thread Sven Geggus
Package: libmapnik0.7 Severity: important The current Version of Mapnik in Debian (squeeze and sid) has been linked against the AGG library provided by the system. Looks like this library (2.5.x) is more or less unmaintained. For this reason mapnik provides a custom Version of the AGG library