[SECURITY] xpdf

[SECURITY] xpdf

[Yaakov (Cygwin/X)]

Dr. Volker,

Could you add this patch to xpdf for CVE-2012-2142:

http://pkgs.fedoraproject.org/cgit/xpdf.git/plain/xpdf-3.03-CVE-2012-2142.diff


Yaakov

Re: [SECURITY] xpdf

[Dr. Volker Zell]

>>>>> Yaakov  writes:

    > Dr. Volker,
    > Could you add this patch to xpdf for CVE-2012-2142:

    > http://pkgs.fedoraproject.org/cgit/xpdf.git/plain/xpdf-3.03-CVE-2012-2142.diff

Noted, but to busy right now
    
    > Yaakov

Ciao
 Volker
 

Re: [SECURITY] xpdf

[Corinna Vinschen]

[-- Attachment #1: Type: text/plain, Size: 481 bytes --]

Hi Volker,

On Jan 17 08:10, Dr. Volker Zell wrote:
> >>>>> Yaakov  writes:
> 
>     > Dr. Volker,
>     > Could you add this patch to xpdf for CVE-2012-2142:
> 
>     > http://pkgs.fedoraproject.org/cgit/xpdf.git/plain/xpdf-3.03-CVE-2012-2142.diff
> 
> Noted, but to busy right now

Any update?


Thanks,
Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

[-- Attachment #2: Type: application/pgp-signature, Size: 819 bytes --]

Re: [SECURITY] xpdf

[Dr. Volker Zell]

>>>>> Corinna Vinschen writes:

    > Hi Volker,
    > On Jan 17 08:10, Dr. Volker Zell wrote:
    >> >>>>> Yaakov  writes:
    >> 
    >> > Dr. Volker,
    >> > Could you add this patch to xpdf for CVE-2012-2142:
    >> 
    >> > http://pkgs.fedoraproject.org/cgit/xpdf.git/plain/xpdf-3.03-CVE-2012-2142.diff
    >> 
    >> Noted, but to busy right now

    > Any update?

Sorry, I'm out of the country until the end of june without cygwin time :-(
    
    > Thanks,
    > Corinna

Ciao
  Volker
  

Re: [SECURITY] xpdf

[Corinna Vinschen]

[-- Attachment #1: Type: text/plain, Size: 1261 bytes --]

Hi Volker,

On May 15 22:05, Dr. Volker Zell wrote:
> >>>>> Corinna Vinschen writes:
> 
>     > Hi Volker,
>     > On Jan 17 08:10, Dr. Volker Zell wrote:
>     >> >>>>> Yaakov  writes:
>     >> 
>     >> > Dr. Volker,
>     >> > Could you add this patch to xpdf for CVE-2012-2142:
>     >> 
>     >> > http://pkgs.fedoraproject.org/cgit/xpdf.git/plain/xpdf-3.03-CVE-2012-2142.diff
>     >> 
>     >> Noted, but to busy right now
> 
>     > Any update?
> 
> Sorry, I'm out of the country until the end of june without cygwin time :-(

Ok, no worries.  I'm glad you're still here.  Would it be ok with you if
we update xpdf temporarily with the aforementioned patch until you're
back?

Btw., did you see the discussion about replacing man with man-db?
It started in March:

  http://cygwin.com/ml/cygwin/2014-03/msg00241.html

There was also the MNAPATH question:

  http://cygwin.com/ml/cygwin/2014-05/msg00283.html

Chris Breisch (CCed) is working on a man-db port.  What are you thinking,
Volker?  Is it ok with you to obsolete man in favor of man-db?


Thanks,
Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

[-- Attachment #2: Type: application/pgp-signature, Size: 819 bytes --]

Re: [SECURITY] xpdf

[Dr. Volker Zell]

>>>>> Corinna Vinschen writes:

    > Hi Volker,
    > On May 15 22:05, Dr. Volker Zell wrote:
    >> >>>>> Corinna Vinschen writes:
    >> 
    >> > Hi Volker,
    >> > On Jan 17 08:10, Dr. Volker Zell wrote:
    >> >> >>>>> Yaakov  writes:
    >> >> 
    >> >> > Dr. Volker,
    >> >> > Could you add this patch to xpdf for CVE-2012-2142:
    >> >> 
    >> >> > http://pkgs.fedoraproject.org/cgit/xpdf.git/plain/xpdf-3.03-CVE-2012-2142.diff
    >> >> 
    >> >> Noted, but to busy right now
    >> 
    >> > Any update?
    >> 
    >> Sorry, I'm out of the country until the end of june without cygwin time :-(

    > Ok, no worries.  I'm glad you're still here.  Would it be ok with you if
    > we update xpdf temporarily with the aforementioned patch until you're
    > back?

Ok.
    
    > Btw., did you see the discussion about replacing man with man-db?
    > It started in March:

Yes, but no time to chime in.
    
    >   http://cygwin.com/ml/cygwin/2014-03/msg00241.html

    > There was also the MNAPATH question:

    >   http://cygwin.com/ml/cygwin/2014-05/msg00283.html

    > Chris Breisch (CCed) is working on a man-db port.  What are you thinking,
    > Volker?  Is it ok with you to obsolete man in favor of man-db?

No problem    

    > Thanks,
    > Corinna

Ciao
  Volker
  

Re: [SECURITY] xpdf

[Chris J. Breisch]

Dr. Volker Zell wrote:
>>>>>> Corinna Vinschen writes:
>
>      >  Chris Breisch (CCed) is working on a man-db port.  What are you thinking,
>      >  Volker?  Is it ok with you to obsolete man in favor of man-db?
>
> No problem
>

Thanks.

-- 
Chris J. Breisch

Re: [SECURITY] xpdf

[Corinna Vinschen]

[-- Attachment #1: Type: text/plain, Size: 1721 bytes --]

On May 16 14:32, Dr. Volker Zell wrote:
> >>>>> Corinna Vinschen writes:
> 
>     > Hi Volker,
>     > On May 15 22:05, Dr. Volker Zell wrote:
>     >> >>>>> Corinna Vinschen writes:
>     >> 
>     >> > Hi Volker,
>     >> > On Jan 17 08:10, Dr. Volker Zell wrote:
>     >> >> >>>>> Yaakov  writes:
>     >> >> 
>     >> >> > Dr. Volker,
>     >> >> > Could you add this patch to xpdf for CVE-2012-2142:
>     >> >> 
>     >> >> > http://pkgs.fedoraproject.org/cgit/xpdf.git/plain/xpdf-3.03-CVE-2012-2142.diff
>     >> >> 
>     >> >> Noted, but to busy right now
>     >> 
>     >> > Any update?
>     >> 
>     >> Sorry, I'm out of the country until the end of june without cygwin time :-(
> 
>     > Ok, no worries.  I'm glad you're still here.  Would it be ok with you if
>     > we update xpdf temporarily with the aforementioned patch until you're
>     > back?
> 
> Ok.

Cool, thank you.  I'm going to create a 3.03-4 version with just the
aforementioned patch additionally to your 3.03-3 version.

>     > Btw., did you see the discussion about replacing man with man-db?
>     > It started in March:
> 
> Yes, but no time to chime in.
>     
>     >   http://cygwin.com/ml/cygwin/2014-03/msg00241.html
> 
>     > There was also the MNAPATH question:
> 
>     >   http://cygwin.com/ml/cygwin/2014-05/msg00283.html
> 
>     > Chris Breisch (CCed) is working on a man-db port.  What are you thinking,
>     > Volker?  Is it ok with you to obsolete man in favor of man-db?
> 
> No problem    

Thanks a lot,
Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

[-- Attachment #2: Type: application/pgp-signature, Size: 819 bytes --]