[From nobody Sun Oct 18 10:03:11 2026
Received: (at submit) by bugs.debian.org; 9 Apr 2024 17:14:12 +0000
X-Spam-Checker-Version: SpamAssassin 3.4.6-bugs.debian.org_2005_01_02
 (2021-04-09) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-8.9 required=4.0 tests=BAYES_00,DKIM_SIGNED,
 DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,PGPSIGNATURE,
 RCVD_IN_DNSWL_LOW,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,SPF_HELO_PASS,
 SPF_PASS autolearn=ham autolearn_force=no
 version=3.4.6-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 21; hammy, 128; neutral, 31; spammy,
 0. spammytokens: hammytokens:0.000-+--H*ct:pgp-sha256,
 0.000-+--XDebbugsCc, 0.000-+--X-Debbugs-Cc, 0.000-+--H*ct:application,
 0.000-+--H*ct:protocol
Return-path: <santiagorr@riseup.net>
Received: from mx1.riseup.net ([198.252.153.129]:57388)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.94.2) (envelope-from <santiagorr@riseup.net>)
 id 1ruF2y-000y1t-8i
 for submit@bugs.debian.org; Tue, 09 Apr 2024 17:14:12 +0000
Received: from fews01-sea.riseup.net (fews01-sea-pn.riseup.net [10.0.1.109])
 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
 key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
 (No client certificate requested)
 by mx1.riseup.net (Postfix) with ESMTPS id 4VDXcf3bvQzDqgm
 for <submit@bugs.debian.org>; Tue,  9 Apr 2024 17:14:10 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=riseup.net; s=squak;
 t=1712682850; bh=3hr099PoPx1j/Ffp6FLcFKDP06CNn4xsN+veQwfFUeE=;
 h=Date:From:To:Subject:From;
 b=jFPG5FXpDkodQC92+1707eNSzy+yhQDBzmEBZBIA3Iq3zN7p/vJm+Nj2MKICtLd8R
 x4XUmZ0agn2JNTE43Yunr7LDLuoK3LcENyJmirQFWmyEWqDJQGxiDEXqM0SknYm9nf
 9zq/4+nqcrTRHp85t2mO0yS8VcVN27jCR23IFr9A=
X-Riseup-User-ID: F1E65A42B664ABC0BDDA0E259665C7A3A8CD93E8EF1F505BEE44E14C8E0BDB6F
Received: from [127.0.0.1] (localhost [127.0.0.1])
 by fews01-sea.riseup.net (Postfix) with ESMTPSA id 4VDXcd5Jw7zJtJP;
 Tue,  9 Apr 2024 17:14:09 +0000 (UTC)
Date: Tue, 9 Apr 2024 14:14:07 -0300
From: Santiago Ruano =?iso-8859-1?Q?Rinc=F3n?= <santiagorr@riseup.net>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: freeimage: consider packaging r1909?
Message-ID: <ZhV3X-SrZLJ3BFkz@pokemon>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature"; boundary="FR1FyBHKBWXH4M5e"
Content-Disposition: inline
X-Reportbug-Version: 12.0.0
Delivered-To: submit@bugs.debian.org


--FR1FyBHKBWXH4M5e
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Source: freeimage
Version: 3.18
Severity: normal
X-Debbugs-Cc: team@security.debian.org

Dear freeimage maintainers and security team,

This is a bug report to discuss if freeimage r1909 should be packaged, while
there is no official 3.19 release.
The svn is found here: https://sourceforge.net/p/freeimage/svn/HEAD/tree/

It is to note that there a some CVEs reported against that SVN revision, and
there is no clear indication they affect 3.18 or older releases. So this co=
uld
mean introducing some bugs.
See: https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909

Any thoughts?=20

  -- Santiago

--FR1FyBHKBWXH4M5e
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQR+lHTq7mkJOyB6t2Un3j1FEEiG7wUCZhV3WwAKCRAn3j1FEEiG
7y/VAP0VC4+b0FSncuSsWuFJ+pV5GTXaAjJdQdomyBfosXYM/wEAhXxM5QiLjEca
O4217KWAGwALHgl7m9jPDWwF7N64ewE=
=N3pn
-----END PGP SIGNATURE-----

--FR1FyBHKBWXH4M5e--
]