I've attached a patch that changes grace to use its embedded t1lib
copy.  This is not at all ideal since probably most of the t1lib
security patches aren't included, but grace is the last package
remaining to drop support for t1lib, so it needs a change.

Switching to freetype, isn't straightforward, and I spent some time on
it today, but it would be the ideal solution.

The other option is removing grace from testing, and eventually
unstable.  Maybe that makes a some sense since upstream is not very
active.

Best wishes,
Mike
diff -Nru grace-5.1.23/debian/changelog grace-5.1.23/debian/changelog
--- grace-5.1.23/debian/changelog	2013-09-28 20:19:53.000000000 +0000
+++ grace-5.1.23/debian/changelog	2014-03-09 23:32:35.000000000 +0000
@@ -1,3 +1,10 @@
+grace (1:5.1.23-3+nmu1) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Use embedded t1lib (closes: #638760).
+
+ -- Michael Gilbert <mgilb...@debian.org>  Sun, 09 Mar 2014 23:26:05 +0000
+
 grace (1:5.1.23-3) unstable; urgency=low
 
   * rules: Automatically update config.{sub,guess} at build time.  Add
diff -Nru grace-5.1.23/debian/control grace-5.1.23/debian/control
--- grace-5.1.23/debian/control	2013-09-28 20:25:03.000000000 +0000
+++ grace-5.1.23/debian/control	2014-03-09 23:27:10.000000000 +0000
@@ -6,7 +6,7 @@
 Standards-Version: 3.9.4
 Build-Depends: debhelper (>= 9), libmotif-dev, libxpm-dev,
  libfftw3-dev, libjpeg-dev, libpng-dev | libpng12-dev, libnetcdf-dev,
- gfortran | fortran-compiler, xmhtml1-dev (>= 1.1.7-19) , libt1-dev, fontconfig,
+ gfortran | fortran-compiler, xmhtml1-dev (>= 1.1.7-19), fontconfig,
  linuxdoc-tools, libxau-dev, texlive-latex-base, texlive-latex-recommended,
  libxbae-dev (>= 4.60.4-4), autotools-dev
 Vcs-Browser: http://anonscm.debian.org/viewvc/collab-maint/deb-maint/grace/trunk/
diff -Nru grace-5.1.23/debian/rules grace-5.1.23/debian/rules
--- grace-5.1.23/debian/rules	2013-09-28 20:18:52.000000000 +0000
+++ grace-5.1.23/debian/rules	2014-03-09 23:31:27.000000000 +0000
@@ -1,7 +1,7 @@
 #!/usr/bin/make -f
 
 export DEB_LDFLAGS_MAINT_APPEND = -Wl,--as-needed
-export DEB_BUILD_MAINT_OPTIONS  = hardening=+bindnow
+export DEB_BUILD_MAINT_OPTIONS  = hardening=+bindnow,-format
 
 %:
 	dh $@ --with autotools_dev
@@ -13,7 +13,8 @@
 	--with-helpviewer="sensible-browser %s" \
 	--with-f77=gfortran \
 	--disable-pdfdrv \
-	--without-bundled-xbae
+	--without-bundled-xbae \
+	--with-bundled-t1lib=yes \
 
 # "make check" is more of a series of demos, requires X
 override_dh_auto_test:

Reply via email to