On 30.03.2012 18:01, Mike Hommey wrote: >> That said, I'll check the reverse dependencies of librsvg2-bin, if more >> packages are affected.
I've gone through the list of reverse dependencies of librsvg2-bin (Depends/Recommends/Suggests/Build-Depends) and found the following packages which still use rsvg instead of rsvg-convert: - bzrtools_2.5+bzr786-1 - docvert_4.0-5 - texmacs_1.0.7.15-1 - trac-graphviz_0.7.5-1 - comixcursors_0.7.2-2 - djview4_4.8-3 - djvulibre_3.5.25.2-1 - optgeo_2.11-2 - pioneers_0.12.5-1 - pymecavideo_5.5-5 - uim_1.7.3-2 - unison2.27.57_2.27.57-5 - unison2.32.52_2.32.52-5 - unison_2.40.63-2 - xine-lib-1.2_1.2.1-2 > Here, it's imagemagick that calls rsvg. So that would be a bug in > imagemagick. imagemagick doesn't list librsvg2-bin as dependency, but it uses it indeed. So it needs to be added to the above list - imagemagick_6.6.9.7-7 I've found in the exp changelog imagemagick (8:6.7.4.0-2) experimental; urgency=low [ Bastien Roucariès ] * Bug fix: "Please enable hardened build flags", thanks to Moritz Muehlenhoff (Closes: #657833). * Bug fix: "Invalid validation DoS CVE-2012-0247/CVE-2012-02478",» thanks to Henri Salo (Closes: #659339). * Bug Fix: Convert delegate from removed /usr/bin/rsvg to /usr/bin/rsvg-convert, thanks to Scott Howard (Closes: #659259) [ Vincent Fourmond ] * Pull in patch from revision 6606 to fix FTBS with newer zlib -- Vincent Fourmond <fourm...@debian.org> Wed, 22 Feb 2012 23:28:04 +0100 The above list is a bit too long for my taste, so I'm going to revert this upstream change for now, and file bugs against the affected packages. As imagemagick has shown, there are apparently packages which don't declare a dependency on librsvg2-bin, but use rsvg nonetheless. I'd argue that they are buggy anyway. Thanks for alerting us. Michael -- Why is it that all of the instruments seeking intelligent life in the universe are pointed away from Earth?
signature.asc
Description: OpenPGP digital signature