Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 117495 - app-text/{poppler|xpdf} first Xpdf round this year
Summary: app-text/{poppler|xpdf} first Xpdf round this year
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: High normal
Assignee: Gentoo Security
URL:
Whiteboard: B2 [glsa] jaervosz
Keywords:
Depends on:
Blocks:
 
Reported: 2006-01-02 14:52 UTC by Sune Kloppenborg Jeppesen (RETIRED)
Modified: 2006-11-11 19:34 UTC (History)
4 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2006-01-02 14:52:19 UTC
Stub for now, details will follow.
Comment 1 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2006-01-03 07:46:03 UTC
See bug #117481 for details.
Comment 2 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2006-01-05 11:01:11 UTC
Comment #9 From Daniel Gryniewicz 2006-01-05 10:16 PST 
poppler is bumped to poppler-0.4.3-r4 with this fix.  Xpdf is not yet done.

Arches please test and mark stable.
Comment 3 Markus Rothe (RETIRED) gentoo-dev 2006-01-05 11:21:31 UTC
stable on ppc64
Comment 4 Stefan Schweizer (RETIRED) gentoo-dev 2006-01-05 11:46:09 UTC
There are two problems with marking new poppler stable:

1) utils have moved from xpdf to poppler
If you mark the new poppler stable you also need to make sure that a newer xpdf is marked stable because poppler blocks older xpdf versions.
Furthermore you should make sure that the currently stable-on-the-arch cups should depend on the new poppler instead of xpdf.

2) bindings have been split out from poppler into poppler-bindings
You need to mark poppler-bindings stable and change the depend on poppler to poppler-bindings in the stable kpdf and kdegraphics ebuild to make sure they still work afterwards.
Comment 5 Markus Rothe (RETIRED) gentoo-dev 2006-01-05 14:29:41 UTC
hmm.. I don't have poppler-bindings installed, but kpdf still works (= displays PDFs correctly)

was I to fast in marking stable?
Comment 6 Mark Loeser (RETIRED) gentoo-dev 2006-01-05 17:55:25 UTC
(In reply to comment #5)
> was I to fast in marking stable?
> 

Looks that way.  What are we supposed to do here?  Sounds like a bunch of other ebuilds need to have their deps updated for poppler-bindings?  Also sounds like all of this (xpdf, poppler, cups) needs to go stable at the same time or we get versions going up/down.
Comment 7 Stefan Schweizer (RETIRED) gentoo-dev 2006-01-05 18:33:32 UTC
your kpdf probably links on xpdf then, can you please check that?
linking on xpdf is not desired and it should be possible to link on poppler/poppler-bindings

I suggest adding a || ( poppler-bindings <poppler-0.4.3-r2 ) DEPEND to the affected ebuilds for the transition period.
Comment 8 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2006-01-05 22:23:13 UTC
Handling stable marking of xpdf here as poppler and old xpdf versions are blocking.
Comment 9 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2006-01-07 23:52:02 UTC
Printing are we ready to mark stable?
Comment 10 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2006-01-08 00:31:43 UTC
[09:29:03] <@genstef> jaervosz: yes we are ready for stable

Arches please test and mark stable.
Comment 11 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2006-01-08 00:59:33 UTC
Back to ebuild to fix KDE deps.
Comment 12 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2006-01-08 01:11:05 UTC
Adding net-print/cups-1.1.23-r7 to the list of packages that need to go stable at the same time.
Comment 13 DEMAINE Benoît-Pierre, aka DoubleHP 2006-01-09 03:46:52 UTC
after 
emerge -Cav poppler xpdf
then
emerge -av poppler xpdf

did work fine. Readed about that in an other bug. Strange fix, but works for me on ~x86
Comment 14 Jeroen Roovers (RETIRED) gentoo-dev 2006-01-09 08:29:16 UTC
I marked these hppa stable:

app-text/poppler-0.4.3-r4
app-text/xpdf-3.01-r5
net-print/cups-1.1.23-r7
app-text/poppler-bindings-0.4.3-r2

Is that the full list? If there are more packages to test and mark, could someone ITK please make note of them, including category and version?
Comment 15 Mike Baikov 2006-01-10 01:19:38 UTC
Guys, see follow thread, are you in course?

http://forums.gentoo.org/viewtopic-t-420682.html
Comment 16 Stefan Cornelius (RETIRED) gentoo-dev 2006-01-10 11:04:20 UTC
Michail: genstef was nice enough to help and took care of the blocking issues, so this should work perfectly now.
Comment 17 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2006-01-10 11:58:47 UTC
KDE please confirm that deps are OK with you.
Comment 18 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2006-01-10 13:04:51 UTC
[21:50:57] <genstef> jaervosz: kde deps are ok

[21:57:05] <genstef> kpdf, kdegraphics just need to make sure to remove the not-latest-unstable-or-stable versions

[22:03:37] <genstef> well, it would be of course good to mark the latest cups stable  :)

Arches please test, mark stable and watch out for dep issues:-) 
Comment 19 Gustavo Zacarias (RETIRED) gentoo-dev 2006-01-11 05:57:25 UTC
sparc done, i think :)
Comment 20 Tobias Scherbaum (RETIRED) gentoo-dev 2006-01-11 07:56:45 UTC
app-text/poppler-0.4.3-r4
app-text/xpdf-3.01-r5
net-print/cups-1.1.23-r7
app-text/poppler-bindings-0.4.3-r2

marked ppc stable ... currently hppa and ppc64 seems to have broken deps.
Comment 21 Tobias Scherbaum (RETIRED) gentoo-dev 2006-01-11 08:02:12 UTC
(In reply to comment #20)
> currently hppa and ppc64 seems to have broken deps.

bleh, forget about this ... i haven't cvs'upd in x11-libs/cairo :/

Comment 22 Markus Rothe (RETIRED) gentoo-dev 2006-01-11 09:42:57 UTC
stable on ppc64 (now realy...)
Comment 23 Jeroen Roovers (RETIRED) gentoo-dev 2006-01-11 10:04:05 UTC
Done for real.
Comment 24 Mark Loeser (RETIRED) gentoo-dev 2006-01-11 22:02:03 UTC
Deps are still not fixed.  The poppler-bindings thing was only added to the latest ~arch KDE ebuilds.
Comment 25 Stefan Schweizer (RETIRED) gentoo-dev 2006-01-12 00:12:44 UTC
It is not needed by the arch(stablle)-kpdf ebuild because it depends only on pdfinfo which is in poppler and not in poppler-bindings
Comment 26 Simon Stelling (RETIRED) gentoo-dev 2006-01-12 06:20:54 UTC
amd64 stable
Comment 27 Mark Loeser (RETIRED) gentoo-dev 2006-01-12 17:32:55 UTC
x86 done
Comment 28 Devils-Hawk 2006-01-15 05:22:23 UTC
There seems to be a weird dependency issue on x86 now:

Calculating dependencies ...done!
[blocks B     ] <app-text/xpdf-3.01-r4 (is blocking app-text/poppler-0.4.3-r4)
[ebuild     U ] app-text/poppler-0.4.3-r4 [0.4.3] -cairo +jpeg +zlib 45 kB
[ebuild     U ] app-text/xpdf-3.01-r5 [3.01-r3] +X 0 kB

U just have to unmerge xpdf-3.01-r3 before merging xpdf-3.01-r5 to fix but IMHO portage should have handled that for me .
Comment 29 Jakub Moc (RETIRED) gentoo-dev 2006-01-15 05:35:31 UTC
(In reply to comment #28)
> U just have to unmerge xpdf-3.01-r3 before merging xpdf-3.01-r5 to fix but IMHO
> portage should have handled that for me .

Please, don't clutter security bugs with completely unrelated things, and also search for duplicates first (Bug 116933).

Comment 30 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2006-01-25 13:27:04 UTC
Alpha any news on this one?
Comment 31 Bryan Østergaard (RETIRED) gentoo-dev 2006-01-25 15:08:22 UTC
Alpha stabled.
Comment 32 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2006-01-25 22:44:56 UTC
Should we wait on pdftohtml on bug #115789 ?
Comment 33 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2006-01-30 14:39:40 UTC
GLSA 200601-17