Debian Bug report logs - #432765
ingimp: Cannot be included in Lenny

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Moritz Muehlenhoff <jmm@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: ingimp: Cannot be included in Lenny

Date: Wed, 11 Jul 2007 22:36:38 +0200

Package: ingimp
Severity: serious

This package includes a whole copy of Gimp, which regularly
has vulnerabilities, it cannot be included in Lenny as is.

Cheers,
        Moritz

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.21-2-686 (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=de_DE.ISO-8859-15@euro (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/bash

Message #10 received at 432765@bugs.debian.org (full text, mbox, reply):

From: Francois Marier <francois@debian.org>

To: Moritz Muehlenhoff <jmm@debian.org>, 432765@bugs.debian.org

Subject: Re: Bug#432765: ingimp: Cannot be included in Lenny

Date: Thu, 12 Jul 2007 09:00:33 +1200

Hi Moritz,

> This package includes a whole copy of Gimp

You are right: the source package includes a copy of GIMP and the binary
packages include the GIMP binary (but not anything else).

> which regularly has vulnerabilities,

The idea is to make it depend on the latest version of the GIMP and update
it whenever a new version of GIMP comes out.  So it will be updated whenever
a new security fix for GIMP is released.  In fact, with the last release of
ingimp that I made yesterday, I set the dependency to be:

  gimp (>= 2.2.16), gimp (<< 2.2.17)

to force the versions to match exactly.

> it cannot be included in Lenny as is.

Could you explain a bit more why you think that way?  As long as ingimp
keeps up with GIMP releases, I fail to see how it should be treated any
differently.

Cheers,

Francois

Message #15 received at 432765@bugs.debian.org (full text, mbox, reply):

From: Moritz Muehlenhoff <jmm@inutil.org>

To: Francois Marier <francois@debian.org>

Cc: 432765@bugs.debian.org, jmm@inutil.org

Subject: Re: Bug#432765: ingimp: Cannot be included in Lenny

Date: Thu, 12 Jul 2007 19:35:07 +0200

Francois Marier wrote:
> So it will be updated whenever a new security fix for GIMP is released.

(..) 

> Could you explain a bit more why you think that way?  As long as ingimp
> keeps up with GIMP releases, I fail to see how it should be treated any
> differently.

We would need to roll out all Gimp security updates twice once it's included
in the stable Lenny release. It's alright to research user interaction
in unstable, but it's doesn't appear to be justified for stable. Or you
could integrate it into the regular gimp package, so that they're build
from the same source package.

Cheers,
        Moritz

Message #20 received at 432765-done@bugs.debian.org (full text, mbox, reply):

From: Martin Michlmayr <tbm@cyrius.com>

To: 432765-done@bugs.debian.org, 561329-done@bugs.debian.org

Subject: Removed

Date: Thu, 11 Feb 2010 23:51:18 +0000

Version: 2.4.7.20080901-1+rm

ingimp was removed from the archive.
-- 
Martin Michlmayr
http://www.cyrius.com/

Send a report that this bug log contains spam.