#1036938 Debian Bug Tracking System <submit@bugs.debian.org>

Package:
libpodofo0.9.8
Source:
libpodofo0.9.8
Description:
PoDoFo - library to work with the PDF file format
Submitter:
yokota
Date:
2025-10-12 11:01:01 UTC
Severity:
normal
Tags:
#1036938#5
Date:
2023-05-29 23:23:52 UTC
From:
To:
Dear Maintainer,

"libpodofo" project was moved to GitHub https://github.com/podofo/podofo .
And released 0.10.0 from there.
Please package them.

"calibre" package now needs libpodofo 0.10 API since Calibre 6.18.

PS: libpodofo 0.10 API is changed from 0.9 API. So you might need some package
transition request.
#1036938#14
Date:
2023-07-02 05:00:47 UTC
From:
To:
Hello, libpodofo maintainer

I add merge request to update libpodofo 0.10.1.
https://salsa.debian.org/debian/libpodofo/-/merge_requests/3

Please check this merge request.

Thanks,
--
YOKOTA Hiroshi
#1036938#19
Date:
2025-04-01 04:29:40 UTC
From:
To:
Hello,

Please update libpodofo to 0.10.4.
https://tracker.debian.org/pkg/libpodofo
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1036938

Because current libpodofo/0.9.8-3.2 is outdated, and Debian calibre package
requires newer libpodofo.

Please examine my marge request at salsa.
https://salsa.debian.org/debian/libpodofo/-/merge_requests/3

libpodofo 0.10.4 also fixes some security issues.
https://security-tracker.debian.org/tracker/source-package/libpodofo
#1036938#28
Date:
2025-08-16 20:52:48 UTC
From:
To:
Hello,

Debian libpodofo dose not updates since 2022, but upstream libpodofo
releases version 1.0.1.
Please update Debian package.
https://github.com/podofo/podofo
#1036938#35
Date:
2025-08-24 16:38:59 UTC
From:
To:
I had a look at this, currently stuck at updating debian/copyright.

cu Andreas
#1036938#40
Date:
2025-08-31 12:34:55 UTC
From:
To:
Code at https://salsa.debian.org/ametzler/libpodofo (experimental branch )

(I have forked he repo since the gbp layout with upstream code cannot
be updated to new upstream with a merge request, you need to merge with
--ff-only all three involved branches.)

I have not done test builds of rdeps yet.

cu Andreas
#1036938#45
Date:
2025-09-01 16:25:31 UTC
From:
To:
I have done so now. It looks *very* bad, libpodofo's API broke. All of
calibre_8.9.0+ds-4 horizon-eda_2.6.0-2.2  scribus_1.6.3+dfsg-0.2 FTBFS
and krename_5.0.2+git20250107.83b86fa-1 cmake-files do not find
libpodofo.

See e.g. https://github.com/horizon-eda/horizon/issues/815 and
https://bugs.scribus.net/view.php?id=17577

cu Andreas
#1036938#58
Date:
2025-09-14 22:35:22 UTC
From:
To:
Hello, Andreas

Thanks for making new PoDoFo pacage.

Calibre is currently supports PoDoFo 0.10.x API.
I was tried to support PoDoFo 1.0 API for Calibre, but it's too hard
to support. Because 1.0 API is differ from 0.10.x API.

Upstream said current LTS release is 0.10.x.
So, please make PoDoFo 0.10.x for Debian package.
Or, make both PoDoFo 1.0 and 0.10.x package.

Please check my merge request to package PoDoFo 0.10.x.
#1036938#63
Date:
2025-09-27 11:06:27 UTC
From:
To:
Hello,

that reads rather painful.

Have you considered salvaging libpodofo?

cu Andreas
#1036938#68
Date:
2025-09-27 12:00:25 UTC
From:
To:
Hello Andreas,

I was embed libpodofo 0.10.5 into Debian calibre since
calibre-8.11.0+ds+~0.10.5-1 .
So, there is no more needs to provide Debian libpodofo 0.10.x package.
* https://tracker.debian.org/pkg/calibre

And I will wait upstream Calibre supports libpodofo 1.0.
If other Debian packages also requires libpodofo 0.10.x package, I
will try to update my marge request on salsa.
#1036938#73
Date:
2025-10-12 10:59:59 UTC
From:
To:
Hi,

could anyone please explain why a request for a new version is severity
"serious"? The mentioned CVEs are tracked in individual bugs already
(#986794, #986791, #1036278, #1035935).

I'll change the severity to "wishlist" in a week from now if nobody
complains / points me to the reason.

Best,
Philip