From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1PrnB3-0005WU-QJ for garchives@archives.gentoo.org; Tue, 22 Feb 2011 08:00:58 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 97D8C1C018; Tue, 22 Feb 2011 08:00:48 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) by pigeon.gentoo.org (Postfix) with ESMTP id B98E11C003 for ; Tue, 22 Feb 2011 08:00:18 +0000 (UTC) Received: from vapier.localnet (localhost [127.0.0.1]) by smtp.gentoo.org (Postfix) with ESMTP id 29D2C1B41B4 for ; Tue, 22 Feb 2011 08:00:18 +0000 (UTC) From: Mike Frysinger Organization: wh0rd.org To: gentoo-dev@lists.gentoo.org Subject: Re: [gentoo-dev] Pending removal(?) of media-libs/pdflib Date: Tue, 22 Feb 2011 03:00:08 -0500 User-Agent: KMail/1.13.5 (Linux/2.6.37; KDE/4.5.5; x86_64; ; ) References: <4D634A84.6010407@gentoo.org> <19811.26050.482587.875149@a1i15.kph.uni-mainz.de> In-Reply-To: <19811.26050.482587.875149@a1i15.kph.uni-mainz.de> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart1364717.VKa7vhdj0J"; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-Transfer-Encoding: 7bit Message-Id: <201102220300.10071.vapier@gentoo.org> X-Archives-Salt: X-Archives-Hash: 340259f39756aeda2383f5802ba70201 --nextPart1364717.VKa7vhdj0J Content-Type: Text/Plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable On Tuesday, February 22, 2011 02:29:06 Ulrich Mueller wrote: > >>>>> On Mon, 21 Feb 2011, Jeremy Olexa wrote: > > The bugs are stacking up[1] and upstream only offers a paid version of > > pdflib-8[2]. It is my understanding that there is no way for us to > > package future versions and the bundled libs are vulnerable[3]. > >=20 > > So, should it be removed? For more info, see the tracker bug for its > > removal[1], there are a number of rdeps that will require fixing[4]. >=20 > sci-visualization/gnuplot[pdf] is currently linking against pdflib. > I'm going to remove that dependency, because in my understanding, > clause 2.1 of the PDFLite license does not allow such linking. > (It allows it for programs under an OSI approved license. However, the > gnuplot license is free, but not OSI approved.) that might disallow it for binaries, but it doesnt disallow it from being u= sed=20 in ebuilds. same situation as binary kernel drivers -- make it the end use= r's=20 problem. =2Dmike --nextPart1364717.VKa7vhdj0J Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.17 (GNU/Linux) iQIcBAABAgAGBQJNY20JAAoJEEFjO5/oN/WB4GoQAODCuTLQxsUj/PqnGHBztsPQ o5sBuHDR7XFEWgN5Fc9kdpw9tmJvDDj87iVqhh0uDI8WQKFN0YBcA0Wat5tAxcvD wViFOmE/6QWCLd19gRHvo95/wgYMfVowh9xTUwaq8gTMpq0XVBcLKMQLVlLTzfUo eKj0oneIoK4PmWAHiIEUIoYDgoBE0nlgSJrYRwiKdBq4J6AAJ9lBUNjEPgfo7ZrK s0qjoNYRAlqD2hmtO1yNPwPkGK+cvd019FECwLBDJjVjtAY3G8tsWeacgplfAcs7 GUQ144zOdo+uO0xyNrcjLFoDdjOyjE1DSgLciDWCTqeaHaCJHS378fzM01vUmL7z AkVOn05PTj6e+GFe/AclFtemWMe2AOQ0L68bDjLBSXJWE7mQOqRHSszdH+zil4Mv 8FJObrIxlXQGgknJQXIdc4WKQ67dvAVam8tmuSBziWQPX0TgoBMIHcum4BbygFPE /rej3NHwDskF66aPgbwccAxHub3ueuE2M4aTRlriUmmLDt3ph9YrgxIhopEwfMiA VtPVLxNohfTG8W2vM+sNn89eS3mGYtzfshffmiyF2ivyGesI89WX/+SVtuMG6QGl XkV3OGCxi1CAwZROuFGliVOukyIxhu5hznN308vQ4RJIe4TfnWhekBYmcGVniOau EWcjcBcuJx9TcTTqW9kR =R/aP -----END PGP SIGNATURE----- --nextPart1364717.VKa7vhdj0J--