tech-pkg archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

graphics/graphite2 update



Hello,

This package has at least 14 CVEs for the version in -current fixed in
1.3.7. More are probably soon to come (Mozilla has disabled it in the
latest Firefox despite the fixes).

I have put an updated version in wip, I have tested that LibreOffice and
Firefox* build and seem to run.

Please take this change during the freeze - it is a security fix.

* while graphite2 is not used by Firefox, it is listed as a dependency
  for Firefox because we have some patches that check for its existence.

Is it preferable I mention package updates in tech-pkg?

coypu


Home | Main Index | Thread Index | Old Index