[MIR] jbig2dec

Bug #691533 reported by Till Kamppeter
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
jbig2dec (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

Binary package hint: jbig2dec

With Ghostscript 9.00 I want to work toweards having identical Ghostscript packages in Debian and Ubuntu.

The Ghostscript 9.00 package of Debian switches over to use all libraries as shared libraries from the system and not any libraries shipped with Ghostscript's source code any more, to save disk space and to make maintenance, especially security updates much easier.

One of the libraries used by Ghostscript 9.00 is libjbig2dec0 which is part of the jbig2dec package. Therefore this package needs to be moved to main.

The code which Ghostscript uses from this package was shipped as part of the Ghostscript source code before. Now Ghostscript will use libjbig2dec0 as shared library, which eliminates the need to update upstream fixes of libjbig2dec0 also in Ghostscript.

The security sites http://cve.mitre.org/cve/cve.html and http://secunia.com/advisories/search/ list only the vulnerability CVE-2009-0196 which is fixed in upstream version 0.10 according to the CHANGES file of the upstream tarball. According to the CHANGES file the upstream project is actively maintained and at Debian the maintainer of Ghostscript also maintains this package.

Revision history for this message
Matthias Klose (doko) wrote :

this looks ok, please could you add a symbols file before we promote the package?

Revision history for this message
Kees Cook (kees) wrote :

Agreed, I have no current security objections with this package. Thanks!

Revision history for this message
Till Kamppeter (till-kamppeter) wrote :

Matthia, I have added the symbols file now,in 0.11-1ubuntu1.

Revision history for this message
Matthias Klose (doko) wrote :

2011-01-11 00:12:47 INFO Override Component to: 'main'
2011-01-11 00:12:56 INFO 'jbig2dec - 0.11-1ubuntu1/universe/libs' source overridden
2011-01-11 00:12:56 INFO 'jbig2dec-0.11-1ubuntu1/universe/graphics/OPTIONAL' binary overridden in natty/amd64
2011-01-11 00:12:56 INFO 'jbig2dec-0.11-1ubuntu1/universe/graphics/OPTIONAL' binary overridden in natty/armel
2011-01-11 00:12:56 INFO 'jbig2dec-0.11-1ubuntu1/universe/graphics/OPTIONAL' binary overridden in natty/i386
2011-01-11 00:12:56 INFO 'jbig2dec-0.11-1ubuntu1/universe/graphics/OPTIONAL' binary overridden in natty/powerpc
2011-01-11 00:12:56 INFO 'libjbig2dec0-0.11-1ubuntu1/universe/libs/OPTIONAL' binary overridden in natty/amd64
2011-01-11 00:12:56 INFO 'libjbig2dec0-0.11-1ubuntu1/universe/libs/OPTIONAL' binary overridden in natty/armel
2011-01-11 00:12:56 INFO 'libjbig2dec0-0.11-1ubuntu1/universe/libs/OPTIONAL' binary overridden in natty/i386
2011-01-11 00:12:56 INFO 'libjbig2dec0-0.11-1ubuntu1/universe/libs/OPTIONAL' binary overridden in natty/powerpc
2011-01-11 00:12:56 INFO 'libjbig2dec0-dev-0.11-1ubuntu1/universe/libdevel/OPTIONAL' binary overridden in natty/amd64
2011-01-11 00:12:56 INFO 'libjbig2dec0-dev-0.11-1ubuntu1/universe/libdevel/OPTIONAL' binary overridden in natty/armel
2011-01-11 00:12:56 INFO 'libjbig2dec0-dev-0.11-1ubuntu1/universe/libdevel/OPTIONAL' binary overridden in natty/i386
2011-01-11 00:12:56 INFO 'libjbig2dec0-dev-0.11-1ubuntu1/universe/libdevel/OPTIONAL' binary overridden in natty/powerpc

Changed in jbig2dec (Ubuntu):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.