Re: Building gettext without libtextstyle

[Bruno Haible]

Santiago Vila wrote:
> by Zack Weinberg, which reads like this:
> 
>   libtextstyle is not packaged for Debian and depends on libcroco

"depends on libcroco" is also wrong. Neither gettext/DEPENDENCIES
nor libtextstyle/DEPENDENCIES mentions libcroco, not even as an optional
dependency.

>   has known security bugs

Before drawing conclusions based on "security bugs", a distro should
better ask upstream for the evaluation of that "security bug". This is
because the CVE system has gone crazy in the last couple of years, see
<https://news.ycombinator.com/item?id=37871480> and
<https://www.youtube.com/watch?v=2Mfgjp_aK3I> (*).

Things would have been clearer if I had posted my evaluation about said
"security bug". But things would also have been clearer if Debian had
asked me for this evaluation, before drawing conclusions.

Bruno

(*) To access youtube.com URLs, use yt-dlp, not a browser.