[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[ft-devel] Bugging package maintainers to update their FreeType packages
[ft-devel] Bugging package maintainers to update their FreeType packages sooner?
Wed, 17 Feb 2016 15:34:36 +0100
Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.5.0
so Bungeman was commenting on my plea to update Ubuntu's package to
I would argue this is more than just "wishlist". In FreeType 2.6 an
actual thread safety model was introduced making FreeType no longer
thread antagonistic. Also, between 2.6 and 2.6.2 FreeType was heavily
fuzzed which resulted in a number of fixes, some of which may be of
security interest but because they were not found as vulnerabilities
they will probably never end up with CVE numbers. If Xenial ships
with FreeType 2.5.2, I have no doubt that it will have already known
but unpatched security issues for its entire life.
I concur, but so far, no response. The same goes for this plea on the
Debian bug tracker:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=812518. I don't know
the situation for other distros, but those are two big ones.
If anyone who is involved in packaging or knows the person doing it is
reading this: please respond or talk to the package maintainer :)
|[Prev in Thread]
||[Next in Thread]|
- [ft-devel] Bugging package maintainers to update their FreeType packages sooner?,
Nikolaus Waxweiler <=