Bug#709146: marked as done (several security issues due embedded t1lib)
Your message dated Tue, 21 May 2013 18:25:37 +0900
with message-id <20130521092537.GC4885@gamma.logic.tuwien.ac.at>
and subject line Re: Bug#709146: several security issues due embedded t1lib
has caused the Debian Bug report #709146,
regarding several security issues due embedded t1lib
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)
--
709146: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709146
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: texlive-bin
Version: 2012.20120628-4
Severity: grave
Tags: security
Due to embedding t1lib, but not (at least) pulling the security
patches from t1lib package, the texlive-bin suffers from:
CVE-2011-0764
CVE-2011-0433
CVE-2011-1552
CVE-2011-1553
CVE-2011-1554
CVE-2010-2642 seems to be fixed in patch-01-buffer-limit
Hiding the fact with the lintian-override doesn't help very much (and
wheezy still have t1lib).
O.
-- System Information:
Debian Release: 7.0
APT prefers stable
APT policy: (500, 'stable'), (300, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 3.2.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
--- End Message ---
--- Begin Message ---
On Di, 21 Mai 2013, Ondřej Surý wrote:
> Due to embedding t1lib, but not (at least) pulling the security
> patches from t1lib package, the texlive-bin suffers from:
Again, irrelevant because only dvipng uses libt1, and dvipng is not
build out of the source of TeX Live.
We still have to include it. See other bug closing email
for explanation.
Norbert
------------------------------------------------------------------------
PREINING, Norbert http://www.preining.info
JAIST, Japan TeX Live & Debian Developer
DSA: 0x09C5B094 fp: 14DF 2E6C 0307 BE6D AD76 A9C0 D2BF 4AA3 09C5 B094
------------------------------------------------------------------------
--- End Message ---
Reply to: