I just uploaded Till's cups-filters which needs this, promoted.
** Changed in: qpdf (Ubuntu)
Status: Fix Committed = Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1024435
Title:
On 08/08/2012 07:29 PM, Jamie Strandboge wrote:
MIR review:
* Does not ship a symbols file or use an empty argument to dh_makeshlibs -V.
This should be considered, but is not a blocker.
Consider it considered. I'm not aware of shipping a symbols file, so
it's something for me to learn
MIR review:
* Builds fine with just main
* extensive testsuite enabled in the build
* Ubuntu does not carry a delta
* Does not ship a symbols file or use an empty argument to dh_makeshlibs -V.
This should be considered, but is not a blocker.
* Does not have a bug subscriber
* Does have a
qpdf 3.0.0-1 is in debian experimental now.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1024435
Title:
[MIR] qpdf
To manage notifications about this bug go to:
Jay, thanks for the quick release. It is synced to Ubuntu now.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1024435
Title:
[MIR] qpdf
To manage notifications about this bug go to:
For anyone who's watching, qpdf-3.0~rc1-1 is now in debian experimental.
Running the test suite is now enabled in the build. Based on the exp
buildd logs, it build and passed its test suite on all debian platforms.
My plan is to allow a couple of weeks for feedback on the release
candidate from a
(For the build dependency, of course, I mean libqpdf-dev 3.0~)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1024435
Title:
[MIR] qpdf
To manage notifications about this bug go to:
Jay, please make sure to give us enough time for updating to qpdf 3.0
final and promoting it to main before Ubuntu's Feature Freeze on August
23.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1024435
Okay, I'll upload 3.0 final sooner. Is experimental okay, or do I need
to upload to unstable in debian? Debian is in freeze right now. I'll
aim for August 2 or 3 to upload 3.0 final.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
Great, experimental is OK.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1024435
Title:
[MIR] qpdf
To manage notifications about this bug go to:
I'm the author of qpdf. You are certainly correct to be concerned about
the security exposure of qpdf, and I'd be the last one to say that it is
100% of any potential for security problems. However I believe that it
is in relatively good shape from a security perspective, and I'll
briefly
I'm wary of adding another pdf parser to main. How much code is being
duplicated that it's worth switching? When I looked at cups-filter, I
can only see some argument parsing code and the P2PCharCodeToUnicode
class mentioning poppler heritage.
I'll assign to jdstrand, for a security team
Note that this is not a PDF interpreter, like Ghostscript is a
PostScript interpreter. It is more like ps-utils but for PDF.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1024435
Title:
[MIR] qpdf
But it does seem to parse them, and thus has a security surface. Can
you comment on the extent of the code duplication in pdftopdf? I'm
trying to get a sense of the cost/benefit here for Jamie's benefit.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is
I'm the one currently working on the new libqpdf-based pdf-
implementation.
The old implementation of pdftopdf does not duplicate that much of poppler, but
it has a class structure that /parallels/ the poppler document representation,
because poppler was never built to /output/ pdfs, but
For what it's worth, I'll mention also that upstream is also a debian
developer since 2005 and is the debian maintainer of the package. qpdf
is known to be used in at least three commercial products and was used
by a former employer (who enthusiastically supported its open source
development) to
16 matches
Mail list logo
