Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 197802 (CVE-2007-2721) - app-text/ghostscript-{gpl,gnu} embeds jasper vulnerable code (CVE-2007-2721)
Summary: app-text/ghostscript-{gpl,gnu} embeds jasper vulnerable code (CVE-2007-2721)
Status: RESOLVED DUPLICATE of bug 196860
Alias: CVE-2007-2721
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: High minor (vote)
Assignee: Gentoo Security
URL: http://secunia.com/advisories/27319/
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-11-01 18:55 UTC by Pierre-Yves Rofes (RETIRED)
Modified: 2007-11-01 18:57 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Pierre-Yves Rofes (RETIRED) gentoo-dev 2007-11-01 18:55:16 UTC
Basically the same issue than bug #179159
The patch is in /usr/portage/media-libs/jasper/files/jasper-overflow-fix.patch
Both ghostscript-gpl-8.54 and the patched version ghostscript-gnu-8.60 are vulnerable.
Comment 1 Robert Buchholz (RETIRED) gentoo-dev 2007-11-01 18:57:13 UTC

*** This bug has been marked as a duplicate of bug 196860 ***