Ben file:
title = "freeimage";
is_affected = .depends ~
/\b(libfreeimage4|libfreeimageplus4|libfreeimage3|libfreeimagepl
us\-doc|libfreeimageplus3)\b/;
is_good = .depends ~ /\b(libfreeimage4|libfreeimageplus4)\b/;
is_bad = .depends ~
/\b(libfreeimage3|libfreeimageplus\-doc|libfreeimageplus3)\b/;
Dear release team,
I hereby request a transition slot for freeimage.
FreeImage is dead upstream and has a number of open security issues.
The package in experimental (4.2.1+ds-1~exp3) moves to FreeImageRe 4.2.1,
which is an actively maintained fork that includes the CVE fixes. Because of
the SONAME bump, the binary packages are renamed:
libfreeimage3 -> libfreeimage4
libfreeimageplus3 -> libfreeimageplus4
ibfreeimageplus-doc is dropped.
The package now builds on all release architectures in experimental.
I rebuilt the reverse dependencies against the new freeimage. Two of them
fail to build, and bugs have been filed for both:
#1151417
#1151418
I kindly ask you to provide a transition slot.
Thank you,
Anton