#709584 cups-filters: outdated embedded data copy: aglfn

Package:
src:cups-filters
Source:
cups-filters
Submitter:
Paul Wise
Date:
2023-01-16 00:33:04 UTC
Severity:
normal
Tags:
#709584#5
Date:
2013-05-24 07:26:33 UTC
From:
To:
The cups-filters source package contains an embedded data copy that is
also outdated (aglfn13.c). This file is shipped in the cups-filters
source package and compiled into libfontembed1 binary package. Please
ask upstream to remove aglfn13.c from source package and instead
build-depend on the aglfn binary package, convert the aglfn.txt shipped
in the aglfn binary package into a C file at build time and possibly add
a Built-Using field.

cups-filters: /filter/fontembed/aglfn13.c
cups-filters: /fontembed/aglfn13.c
aglfn: /usr/share/aglfn/aglfn.txt

$ grep -A2 'Table version' /usr/share/aglfn/aglfn.txt
# Table version: 1.7
# Date:          November 6, 2008
# URL:           http://sourceforge.net/adobe/aglfn/
$ grep -FB1 1.3 /usr/share/aglfn/aglfn.txt
# 1.4 [24 September 2003]
# - Changed version to 1.4, to avoid confusion with the AGL 1.3.
#709584#10
Date:
2013-05-24 10:15:30 UTC
From:
To:
Hi Paul, and thanks for your bugreport; good catch indeed!

Le vendredi, 24 mai 2013 09.26:33, Paul Wise a écrit :

I have now reported it on the upstream bugtracker, see forwarded header.

Cheers,

OdyX
#709584#19
Date:
2013-05-24 16:14:22 UTC
From:
To:
May be ask for a lintian test ? (me hide after massive bug about gfdl)
#709584#26
Date:
2023-01-15 18:54:12 UTC
From:
To:
Hi Paul,

this bug was marked as "fixed-upstream" long time ago, so it was probably
fixed in a later upload. Thus I am manually closing this bug now.

Best regards,
Thorsten

(using the complete address now)
#709584#29
Date:
2023-01-15 18:48:00 UTC
From:
To:
Hi Paul,

this bug was marked as "fixed-upstream" long time ago, so it was probably
fixed in a later upload. Thus I am manually closing this bug now.

Best regards,
Thorsten
#709584#34
Date:
2023-01-16 00:31:24 UTC
From:
To:
Control: reopen -1
Control: found -1 1.28.16-1

It is easy to verify this is unfixed, cups-filters still embeds aglfn:

   $ chronic apt source cups-filters
   $ find cups-filters*/ -iname *aglfn*
   cups-filters-1.28.16/fontembed/aglfn13.c

Looking at the upstream bug they just closed the bug (because the data
is currently unused) without removing the embed or updating it.

https://bugs.linuxfoundation.org/show_bug.cgi?id=1135

The preferred solution would be to have libfontembed load the aglfn
file at runtime. Alternatively the aglfn text file (from the aglfn
package or downloaded from GitHub) could be converted into C code
and compiled into the libfontembed library.

https://github.com/adobe-type-tools/agl-aglfn