Bug#840691: ghostscript and evince/libspectre problem
Hi,
On Thu, Oct 27, 2016 at 08:54:39AM +0200, Moritz Muehlenhoff wrote:
> On Wed, Oct 26, 2016 at 11:09:54PM -0400, Roberto C. Sánchez wrote:
> > On Tue, Oct 25, 2016 at 09:54:01PM +0200, Salvatore Bonaccorso wrote:
> > > Hi Roberto
> > >
> > > Could you double-check/confirm if you see the same
> > > https://bugs.debian.org/840691 in wheezy? Note although the bug is
> > > still assigned to ghostscript I think the problem uncovered is
> > > actually in libspectre as noted in the bug log. But I wonder if you
> > > see the same issues in wheezy now that ghostscript is updated there.
> > >
> > Salvatore,
> >
> > Here is what I found:
> >
> > - On Jessie, evince segfaults on AIM-864.ps with both ghostscript
> > packages at versions 9.06~dfsg-2+deb8u2 and 9.06~dfsg-2+deb8u3
> > (this is clearly different for me than what is in the bug reports)
> > - On Wheezy, evince renders AIM-864.ps with ghostscript packages at
> > version 9.06~dfsg-2+deb8u2, but segfaults with ghostscript packages
> > at version 9.06~dfsg-2+deb8u3
> > - In all cases, gv renders the document correctly
> >
> > I believe that the short answer to your question is, "yes the same issue
> > occurs in wheezy."
> >
> > Do you plan to address this issue, or is there something that I can to
> > do help speed the process along?
>
> Salvatore mentioned that the same bug occurs when unstable has the security
> patches merged (which hasn't happened so far :-/), so this needs to be reported
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^<---
FTR, I have prepared those actually as well, but not yet done the
upload given the problems. Test packages are at
https://people.debian.org/~carnil/tmp/ghostscript/ .
Regards,
Salvatore
Reply to: