From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id AB7cGY8ommBMVAEAgWs5BA (envelope-from ) for ; Tue, 11 May 2021 08:47:43 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id IKeCFY8ommA1awAAbx9fmQ (envelope-from ) for ; Tue, 11 May 2021 06:47:43 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id D780821110 for ; Tue, 11 May 2021 08:47:42 +0200 (CEST) Received: from localhost ([::1]:48860 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lgMBA-00036G-9Z for larch@yhetil.org; Tue, 11 May 2021 02:47:40 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:42670) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lgLzo-0008K3-Ot for emacs-orgmode@gnu.org; Tue, 11 May 2021 02:35:56 -0400 Received: from mout.web.de ([212.227.17.12]:45091) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lgLzl-00008x-B8 for emacs-orgmode@gnu.org; Tue, 11 May 2021 02:35:56 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=web.de; s=dbaedf251592; t=1620714949; bh=WfKoZxgCQICwuKyw3G86GLVpoHcu27Z9I8npwNMIQcI=; h=X-UI-Sender-Class:References:From:To:Cc:Subject:In-reply-to:Date; b=bAWDeIIxQ9WuiTGb0pkA1Mhz31YaBDGCqzdXNE7ZHTJghAk53bU5A8TSu8e+yFlaM r6bBLs35h0ZjpkIRCRW5yrVg48uRK3nDkK/IJWLIkHTO6qShrfqPI8dnUQ94O2k8UQ l92KZl/MSCmJFRVzU6oFmvFLAFnUQu+Xgdg0+kb8= X-UI-Sender-Class: c548c8c5-30a9-4db5-a2e7-cb6cb037b8f9 Received: from fluss ([84.165.17.25]) by smtp.web.de (mrweb106 [213.165.67.124]) with ESMTPSA (Nemesis) id 1MJnrX-1lw6Um2qhV-00K8dA; Tue, 11 May 2021 08:35:49 +0200 References: <87im3qj092.fsf@iki.fi> <87h7jaqvne.fsf@alphaville.usersys.redhat.com> <8735utdgs4.fsf@gmail.com> User-agent: mu4e 1.4.15; emacs 28.0.50 From: "Dr. Arne Babenhauserheide" To: Tim Cross Subject: Re: The fate of ditaa.jar (9.4.5.) In-reply-to: <8735utdgs4.fsf@gmail.com> Date: Tue, 11 May 2021 08:35:46 +0200 Message-ID: <875yzpkcal.fsf@web.de> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Provags-ID: V03:K1:nLnN3MiYRIIWHptw1HSqbP5CcsD7KEn32Bo0WbcgeUfkTJ3yWZL jMP5Mxu3R2j1tcEJ+peJk3Sk0HiBXBlfgLFHBud7oKOn0Z0Cd2XGAGZLVBmgQYPJDkF0PO8 MWzVdUQzNhf3MM9LlupJL5WuDQBW/CMbkI3XuoxuL5SUCc72v5WN+T1jHy1wdT3kmgQxR8q WRudXWEcoL0ujm+OiuVog== X-UI-Out-Filterresults: notjunk:1;V03:K0:ip6K3RJywBc=:KsCMPYfSYc7wXem6kV45Fi FPvXcV9wOJjPSbq+UVnk5lVWWIx35bFjFoCBwTiRa1nq2WIylkQykwNGTOuPPop5jTJPXJvsB uxII9NtoN8ghetpiPP5SjRwQ0nfkesPcqn52E9GwHgs5kCkBXilnUOTJdbd83OF8Xpf3f6SsG 29PJFlSXlBZzYKq1VDwqI7f4qYhEua2IwLCsoxPc3t0UePbksy2SS+mY0AkbPUSNYlrIos5mQ Lwl11GtoVKsnOq0Nuks7Mf991X43RoRynqKM81TSo2kppF/e6nZv70Y3T1Y7Ww3Mk5eqFmR/i A2xwDXRWEUxA9OIbaKA24r33KfJp5HXwNG825mFBIeOmsvRJ+BiefmRKqVQcqzu2I83m6mxS3 wRr46C4hXhvuZ+DaDflywYH+OWfPC9yaOLlsemoyLzi/rQk4X5BapB6g+OMwUVBiOO7xzS91y Ge5zyp/wsUPQsUAhiJ3/zsKZnDw4k1Lkllt71I2EI020Hpik9woxyux3CVxN+spjodUdpb7jF a6nR4qfjuMeB0SU5b5Zti3+F+IGDXTwfntGQFGcogJKRzyAnhZFsJN8l6FTjjhkHQ5n+D/1TE ZWZPhxOhYEW9xrZhZeOYIY75gxl2duAP9QqrP2zN1Vd84Cz8l9WFfRV6Ht8VSELI53aieGt7l bWnJRh6V8R6YpGCNCrHqBUJGyLuQsCR0WWLPc4JZwqxC0B+s3zjTLbhGx4edTcGoNJHkV5Dta 4ThRhOyRktVHIb5bQcBJyMVpRUAlP2myzAgKNg3npvUZnaBsQNULMnO4sHuEQycCvqJo+wj8o 9SmlMEe2lyc9hccIK+AhOEQisB+d5+RZt6IPKYZeUyBMkaXXWO+CR6c3fBY59PmMSEjyvkweh g+tY0gjoE3rLJM7CJzXDOg2vXhL43g9v4efwA5I4UTGdvpgst0rtYiFoKR26OTyCIPjAQ1VkD JYa3WLx5x4CiGRX5X862f6HDumXLYuRdrIItTJYw4yUeFCC9+sRf5aJ2lGacco2tqPgC3/n8S CfDalM9Ihaydt8M6QL++21igiCcCtD8TlpxNi1fJZZ1G2jpGoKZWy9CoYtJXhEMzZdlRXACEb gRL+VMqwMMcTz3ljdKCSHxc+NoJqZSmfowVAm/ShmCp8mQTLj3XIeot8Yat0dhFiD8Bf/bdKm /uHSTVM9rPXeO429MpnKguhNwMGJ+wgmr9sAFkNbph999iqBJX1Ap6ridebpMbwL4w8Rw= Received-SPF: pass client-ip=212.227.17.12; envelope-from=arne_bab@web.de; helo=mout.web.de X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-orgmode@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "General discussions about Org-mode." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: emacs-orgmode@gnu.org Errors-To: emacs-orgmode-bounces+larch=yhetil.org@gnu.org Sender: "Emacs-orgmode" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1620715663; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=WfKoZxgCQICwuKyw3G86GLVpoHcu27Z9I8npwNMIQcI=; b=sNNtDOE2SqEXjYmJayqPdtB4ka4lsZ0FaY4XJRv/AOSwZVgELYw57Uuoys+0uCQ9KU25AN XDOD/ZP0cg+vvm+BRZzTNliQD3EzCRZauccSwSKpXMPvSdlXCW5CMcbn3/MYacwd1KyVqx a9vB3HMFoIb6Z/RO/i4CyHQTy7RfDdo28M1t/cMUg62m7MRn5fZtPOMRbiyUT76WlfLQed pybUYctmsE5ZH/R9ciutYcx6iMrYs1x0Heyqm+Fv8F55/RhmbvP13brhvYavhbOcx2Ak8I 2TVUczSjirvSMItDajDeCPEJu8ok4r+ya36tiApshle2cgf4vIfGPUn/p8wXVQ== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1620715663; a=rsa-sha256; cv=none; b=f9B8wFjFPOx1Efooq0zm003FOybbGFrLk1w5jS5AUr4Xuo8eLREQpNQo1QnQMPDNKdbe1O Zzo6GskPh9/ffhVFqpbEjp7tB4yReouxTzaTan43sFM5TVvBbPFhzmjHnMLlYtWsX4AFW9 iOmbBDjxiuPRTl+YuQA64gZMiVWUC94Sgh5bB4NxbgyJlPeuGxdFRwe6hWn3FhPS2YexNj DzH/1fIRv3/r8XFu5pbMSGL6CGuvZNIzX/qCTciUUCrkaTfTUU0xAcd6dqE7V3KSZ34Z53 0KPaherwY6PBRsvYI9GyiJQRnPpasSmwYL+9RIszwFUDCfEtQlh7OtWCWiW2iw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=web.de header.s=dbaedf251592 header.b=bAWDeIIx; dmarc=pass (policy=none) header.from=web.de; spf=pass (aspmx1.migadu.com: domain of emacs-orgmode-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=emacs-orgmode-bounces@gnu.org X-Migadu-Spam-Score: -4.25 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=web.de header.s=dbaedf251592 header.b=bAWDeIIx; dmarc=pass (policy=none) header.from=web.de; spf=pass (aspmx1.migadu.com: domain of emacs-orgmode-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=emacs-orgmode-bounces@gnu.org X-Migadu-Queue-Id: D780821110 X-Spam-Score: -4.25 X-Migadu-Scanner: scn0.migadu.com X-TUID: 43o46bDErSAn --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Tim Cross writes: > I agree. As pointed out already, just bundling the jar file is not > sufficient as you need a java runtime as well. Java is available in my distribution, ditaa is not. Removing ditaa from org means that I have to do manual installation and configuration, while with ditaa bundled, org-mode can simply note that I need java installed. > If we bundle it, we also need to ensure it is updated if/when new jar > versions are released. We can do that, but we don=E2=80=99t have to. As long as the bundled jar wo= rks, it is much better than no jar. And users can use newer version as they like by changing the jar-path. Note that this isn=E2=80=99t about security, since even if an old version of ditaa should turn out to be vulnerable, this would still be less dangerous than a shell-block. Therefore old versions of ditaa are completely fine. Best wishes, Arne =2D-=20 Unpolitisch sein hei=C3=9Ft politisch sein ohne es zu merken --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQJEBAEBCAAuFiEE801qEjXQSQPNItXAE++NRSQDw+sFAmCaJcQQHGFybmVfYmFi QHdlYi5kZQAKCRAT741FJAPD632OD/9UwoMafq9L5VCA8dXNMWQDPuapD5kl58/A 1N5v/XD9JeIcSov6XnUVxFn4XeFBTHAwIE3tx3Sy0VjnK2M2A+3S3RSkVvNZ3zZY rhqlRy3sX03wLGHMzWFHfNtniPdQmO00raDX8R/y4MP4C4Mc+iLqMS09mPxATCjJ DIGBZ8x7Hl9aq5QUUfsK2hDxqBnGUI9BARUPO3wms1ORYurVmt2wNDtRcUhVXnwh TgQhFsOMRNBr23fd6/19gXJRSowj5Qp+IQUzX9bppn73Rj6inNdHYqIWlHO03X70 CVnlMPv0BldAqY/ZtwNEYUgEjVhoMCI8osfIhndCsns88ME4hrom3d0HXUFbVrP0 rOeXGKmYJ9Egphe0kjDnCDdSAOj2u8trzBt62OJo5gMd4tIHuzvDWO9IdYSu96yV Noe8E6J9onK7uQ59H5ONTXGv/U/Kcp8XGtBDRuVR2LIYPf9YnLVxVFUG+NKQxunw gREEJBaH//ojJg/DvfTqYUtlGBdEL0Tf+ppQ/bhoTqXVjgrI2TswJqduBxS/h+nu 044eA2OgVelzInYjieLk0r70HusBlV1AuotjnjpFBnq/MLPFZVjlddE4faWziFPr eWF/21SmMhWFVeIGFD2cTTNmuBRQ4ogv4ub5LIS24bPaYe8Un/CywQmvc2geC6// zutNjB0y6ojEBAEBCAAuFiEE3Si95tmHXKvOSosd3M8NswvBBUgFAmCaJcQQHGFy bmVfYmFiQHdlYi5kZQAKCRDczw2zC8EFSKBIA/9v6zvlZdhNtSjrn/2HY58HMmBo 73MNuBp1rKNPGchOWrvu9XbDO8A7Mxqbi2HY4/pDONhuko26JA75XgzLGnf3CLGo cyz+kd/3gGvNsZrDfIWVlNu8QWMfsuE+M/qMAB2BYtaysCe4ASFkS7311J+Vwxw4 s5c8sUmaB2TcgQo9+w== =2YJT -----END PGP SIGNATURE----- --=-=-=--