Bug 197802 (CVE-2007-2721)

Summary:	app-text/ghostscript-{gpl,gnu} embeds jasper vulnerable code (CVE-2007-2721)
Product:	Gentoo Security	Reporter:	Pierre-Yves Rofes (RETIRED) <py>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	minor
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://secunia.com/advisories/27319/
Whiteboard:
Package list:		Runtime testing required:	---

Description Pierre-Yves Rofes (RETIRED) gentoo-dev

2007-11-01 18:55:16 UTC

Basically the same issue than bug #179159
The patch is in /usr/portage/media-libs/jasper/files/jasper-overflow-fix.patch
Both ghostscript-gpl-8.54 and the patched version ghostscript-gnu-8.60 are vulnerable.

Comment 1 Robert Buchholz (RETIRED) gentoo-dev

2007-11-01 18:57:13 UTC


*** This bug has been marked as a duplicate of bug 196860 ***