[alpine-aports] [PATCH v2] non-free/xephem: new aport
On Thu, Jan 21, 2016 at 09:38:04PM -0800, Isaac Dunham wrote:
> On Thu, Jan 21, 2016 at 10:23:54AM +0200, Timo Teras wrote:
> > On Wed, 20 Jan 2016 09:06:11 -0800
> > Isaac Dunham <ibid.ag_at_gmail.com> wrote:
> > > As far as standard libs, here's a summary:
> > > libz standard
> > > libpng standard, but old (1.2.8 is bundled; 1.6 would need
> > > source changes; should update to 1.2.5x at least)
> > > libjpegd renamed libjpeg-6b; should be easy to update
> > > libXm OpenMotif binaries; not used
> > > liblilxml not widely available; written by same author, LGPL
> > > libip libastro local libs used in build
> > Sounds kinda old and outdated code. Generally we try to avoid bundled
> > libs; but there are few exceptions too.
> Right now I'm waiting for an answer from the author about those.
> (Remember, there's a reason this is in non-free/.)
> For what it's worth, XEphem is one of the few programs where I wouldn't
> worry too much about vulnerabilities.
> You'd have a hard time opening a file without deliberately installing it;
> someone who could manage to come up with an exploit would have a hundred
> easier ways.
> If I don't get the OK to distribute xephem built with upgraded libpng
> and system libz, I will submit an aport, including the patches in the
> same directory but with a note rather than including them in sources.
It is OK.
Patch attached (gzip'd for size, since it's nearly 1 megabyte-mostly
from updating libpng).
libjpegd -> libjpeg-turbo 8 is not a simple recompile.
Received on Sat Jan 23 2016 - 13:19:46 UTC