Bug#974140: Bug#974139: libpango1.0-dev: PangoFcFont, PangoFcFontMap no longer subclassable

[Marc Lehmann]

On Tue, Nov 10, 2020 at 04:30:07PM +0000, Simon McVittie <smcv at debian.org> wrote:
> Control: tags 974139 = upstream wontfix

I think this can't be a wontfix, as it directly breaks debian policy
(8.1), as the ABI has changed incompatibly.

upstream has confirmed that pango is essentially unmaintained and they do
not keep ABI compatibility, or more exactly, they change the ABI without
bumping the soname.

Since these ABI changes can easily cause security issues as it creates
out-of-bound writes, I think debian at the very least has to bump the
soname version to avoid this.

-- 
                The choice of a       Deliantra, the free code+content MORPG
      -----==-     _GNU_              http://www.deliantra.net
      ----==-- _       generation
      ---==---(_)__  __ ____  __      Marc Lehmann
      --==---/ / _ \/ // /\ \/ /      schmorp at schmorp.de
      -=====/_/_//_/\_,_/ /_/\_\