Re: Bug#584663: Bug#584653: CVE-2010-2055

[Michael Gilbert <michael.s.gilbert@gmail.com>]

On Thu, Dec 23, 2010 at 5:14 PM, Jonas Smedegaard wrote:
> Hi Julien,
>
> On Thu, Dec 23, 2010 at 10:34:50PM +0100, Julien Cristau wrote:
>>
>> On Fri, Dec 17, 2010 at 20:15:19 -0500, Michael Gilbert wrote:
>>
>>> On Sun, Dec 12, 2010 at 3:31 PM, Michael Gilbert wrote:
>>> > On Fri, Dec 10, 2010 at 11:03 PM, Jonas Smedegaard wrote:
>>> >> Please do push your changes and prepare a release for unstable. >>
>>> >>  That release will not be an NMU, though, but a real release by >> our team,
>>> >> including you!
>>> >
>>> > I created a new branch and pushed it to git called 8.71-dfsg2-7. >
>>> > Please review and merge/upload if you feel comfortable with it.
>>>
>>> Do you have any feedback on these changes?  If not, is there anything
>>> else I can address thats currently holding this up?  Thanks,
>>>
>> jmm says this needs to be fixed pre-release.  Tagging accordingly and
>> Cc:ing debian-devel per the latest release update.
>>
>> I'll try and go over your changes if there's no progress in the next few
>> days.
>
> Feel free to work on it now - no need to wait:
>
> I do not feel comfortable with further patches on top of the already heavily
> patched code in testing.
>
> If you want to take responsibility for it, you are most welcome.

I've fixed this in a branch in your git tree [0] and volunteered to
help support it over squeeze's lifetime.  Since you haven't responded
to any of that for a few weeks now, Moritz has volunteered to review
and will probably upload my original NMU version.

Best wishes,
Mike

[0] http://git.debian.org/?p=collab-maint/ghostscript.git;a=shortlog;h=refs/heads/8.71.dfsg2-7