Le Jeu 13 septembre 2012 05:02, Ben Rosser a écrit : > So I've had a review ticket open on bugzilla for a while now for this > package: > https://bugzilla.redhat.com/show_bug.cgi?id=823679 > > The software, pdfminer, bundles Adobe cmap data to process Chinese, > Japanese, and Korean languages in a pdf file. However, the question is: > does this violate the general prohibition against bundling libraries? I'm > not exactly sure, because I think it's more like bundled data than bundled > code- but I don't know if that makes a difference to the packaging > guidelines. > > If it does violate that prohibition, the cmap stuff can easily be removed > and not built into the library (it's an optional component). Adobe CMAP is used by lots of font, ps and pdf related apps and IIRC packaging it is currently on the wishlist. You should unbundle it and create a separate package. I don't think CMAP has security implications, but projects that bundle old versions of the Adobe datafiles will behave in non-optimal ways when they hit a font/text combination that requires a mapping Adobe introduced in a later version. -- Nicolas Mailhot -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel
