On Tue, Mar 26, 2013 at 11:47:58AM +0100, pgajdos@suse.cz wrote:
Hi list,
let us consider removing t1lib from factory. t1lib is unmaintained, see e. g.: CVE-2010-2642 CVE-2011-1552 CVE-2011-1553 CVE-2011-1554 CVE-2011-0433
Packages which requires t1lib for build in factory: evince texlive VFlib3
evince and VFlib3 could perhaps drop --with-t1lib configure switch, texlive could either use its own copy or drop support as well -- it appears from code that it uses t1lib as fallback if freetype2 can't handle given font.
Opinions? Do you see any drawbacks?
No way, if there is no system t1lib then TeXLive will fall back to the t1lib in its own source tar ball. It is required for xdvi, dvipng, and ps2pkm Werner -- "Having a smoking section in a restaurant is like having a peeing section in a swimming pool." -- Edward Burr -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org