package: t1lib
version: 5.1.2-3
severity: grave
tag: security

Hi, the t1lib package currently has a significant set of security
vulnerabilities [0].  There hasn't been an upstream release in over 3
years, so it seems unmaintained, and thus the issues are unlikely to
be fixed.  Some tools such as xpdf have simply dropped support for
t1lib because of this [1].  I've submitted another bug to the release
team recommending removal of the package [2].  Of course if the issues
are somehow fixed, the package can stay.

Best wishes,
Mike

[0] http://security-tracker.debian.org/tracker/source-package/t1lib
[1] http://www.foolabs.com/xpdf/download.html
[2] http://bugs.debian.org/6370404



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to