[Pkg-tigervnc-devel] Comments regarding tigervnc_1.2.0+X1.12.4-1_amd64.changes

[Joachim Falk]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hey All,

Am 18.04.2013 19:09, schrieb Luca Falavigna:
> Hi,
> 
> having convenience copies of fltk and Xorg included in this package
> is not optimal. I read README.source file about the rationale, but
> I'd still prefer to build sources against packages in the archive
> instead.
> 
> Would it be possible to discuss this issue with both X Strike Force
> guys and fltk maintainer to see whether a better solution can be
> found? Providing a xserver-xorg-source binary package, as I
> understand happens in Fedora, could be a good starting point.
> 
> This would be a huge benefit from a security point of view too: a
> security flaw was recently discovered in Xorg [0], having a single
> source to fix is definitely better than cherry-picking patches to
> be adapted to embedded copies.
> 
> [0] http://www.debian.org/security/2013/dsa-2661
> 
> Cheers, Luca
> 
> 

lets fix this one at a time. Lets start with the included fltk.
We will need the FLTK maintainer (Aaron) to add some patches on top
of fltk.

"
# The FLTK in debian is either too old (squeeze) or is missing some
# extension patches (wheezy) required by TigerVNC, i.e.,
# http://www.fltk.org/strfiles/2599/fltk-1.3.x-keyboard-x11.patch.
# Maybe some more patches are missing. I have not checked further.
"

Lets ask him first, if he is amenable to this changes.

Regards,
Joachim Falk
- -- 
Joachim Falk <Joachim.Falk at gmx.de>

You can always tell a really good idea by the enemies it makes.
  --programmers' axiom
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=FLmb
-----END PGP SIGNATURE-----