[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#582116: texlive-bin: CVE-2010-0829 multiple array index errors



> And could you *PLEASE* verify *before* submitting a grave bug that this
> actually applies to the pacakge?????????????????????????????

this is actually my fault.  i had recently checked the texlive-bin
package for the existence embedded code copies, but didn't do a
complete job to determine if those embeds were actually.  that's a lot
more effort than just finding code presence, and you as the maintainer
know better anyway.

along with dvipng, i found the presence of source code from these other
packages (and no dependency on the system lib). can you confirm that all
of these are also unused?

libgd2
icu
libjpeg
dvipdfmx
lcdf-typetools
tex4ht
freetype
freetype2
silgraphite
unzip

thanks,
mike



Reply to: