Bug#466181: wine: Ships and uses embedded giflib sources

2014-01-21 Thread Michael Gilbert
control: tag -1 help control: tag -1 minor control: tag -1 -wontfix The embedded code in wine is actually a fork of ungif, which is an older version of giflib. It's going to be a lot of work to make actually fix this, so I'm not going to do it myself. I am happy to accept help. Best wishes,

Bug#466181: wine: Ships and uses embedded giflib sources

2008-06-16 Thread Moritz Muehlenhoff
tags 466181 -security thanks On Sun, Feb 17, 2008 at 05:58:40AM +0200, Guillem Jover wrote: This packages includes an embedded (partial) copy of giflib sources, this might be a problem for security updates or normal enhancements to the library. In the case of wine the security implications

Bug#466181: wine: Ships and uses embedded giflib sources

2008-03-06 Thread Ove Kaaven
Javier Serrano Polo skrev: I may have a look at this, but I need that wontfix tag out. What do you mean? Have a look at this? What's to look at? And why do you need the tag removed *before* looking at it? It's not like I'd do anything about it without a good alternative, and you can't

Bug#466181: wine: Ships and uses embedded giflib sources

2008-03-06 Thread Javier Serrano Polo
El dj 06 de 03 del 2008 a les 14:59 +0100, en/na Ove Kaaven va escriure: What do you mean? I mean I may investigate further into this problem and find a solution. And why do you need the tag removed *before* looking at it? The wontfix tag means you won't fix the bug (i.e., won't accept good

Bug#466181: wine: Ships and uses embedded giflib sources

2008-03-06 Thread Ove Kaaven
Javier Serrano Polo skrev: El dj 06 de 03 del 2008 a les 14:59 +0100, en/na Ove Kaaven va escriure: What do you mean? I mean I may investigate further into this problem and find a solution. And why do you need the tag removed *before* looking at it? The wontfix tag means you won't fix the

Bug#466181: wine: Ships and uses embedded giflib sources

2008-03-06 Thread Javier Serrano Polo
Please read the arguments given in http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=466181#42 and update embedded-code-copies accordingly. Note that giflib isn't the only embedded copy and may be unfeasible to support security in wine. Probably this bug should be renamed to ships several embedded

Bug#466181: wine: Ships and uses embedded giflib sources

2008-03-05 Thread Javier Serrano Polo
I may have a look at this, but I need that wontfix tag out. It's up to you to decide whether upstream requirements are more important than those of security team. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#466181: wine: Ships and uses embedded giflib sources

2008-02-17 Thread Nico Golde
Hi Ove, * Ove Kaaven [EMAIL PROTECTED] [2008-02-17 13:41]: Guillem Jover skrev: This packages includes an embedded (partial) copy of giflib sources, this might be a problem for security updates or normal enhancements to the library. Added this to our list[0] of embedded code copies. You're

Bug#466181: wine: Ships and uses embedded giflib sources

2008-02-17 Thread Ove Kaaven
Nico Golde skrev: That is a problem no matter if there is already an issue in the code because if a security issue is published for giflib the security team can't know that this needs to be fixed in wine as well and it does not make sense to fix this at multiple places when a shared library

Bug#466181: wine: Ships and uses embedded giflib sources

2008-02-16 Thread Guillem Jover
Package: wine Version: 0.9.54-1 Severity: important Tags: security Hi, This packages includes an embedded (partial) copy of giflib sources, this might be a problem for security updates or normal enhancements to the library. regards, guillem -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with

Bug#466181: wine: Ships and uses embedded giflib sources

2008-02-16 Thread Ove Kaaven
Guillem Jover skrev: Package: wine Version: 0.9.54-1 Severity: important Tags: security Hi, This packages includes an embedded (partial) copy of giflib sources, this might be a problem for security updates or normal enhancements to the library. You're saying might be a problem. But *is*