Bug#565500: must not depend on libthai

2011-03-29 Thread Theppitak Karoonboonyanan
On Wed, Mar 30, 2011 at 1:37 AM, Josselin Mouette wrote: > Le mardi 29 mars 2011 à 15:20 +0700, Theppitak Karoonboonyanan a > écrit : >> But if all patches in bug #620001, #620002 and #620004 are accepted into >> sid, the urge for the split can be dropped. > > They will most certainly be included,

Bug#565500: must not depend on libthai

2011-03-29 Thread Josselin Mouette
Le mardi 29 mars 2011 à 15:20 +0700, Theppitak Karoonboonyanan a écrit : > But if all patches in bug #620001, #620002 and #620004 are accepted into > sid, the urge for the split can be dropped. They will most certainly be included, just let me time to review them. (All of us are pretty busy with

Bug#565500: must not depend on libthai

2011-03-29 Thread Theppitak Karoonboonyanan
Package: pango1.0 Followup-For: Bug #565500 For the record, CVE-2009-4012 (DSA-1971) was later analyzed by Red Hat [1] to be ineffective. Instead, Pango itself was found to be vulnerable. [1] https://bugzilla.redhat.com/show_bug.cgi?id=554416 Although I couldn't find an obvious exploit when I