On Thu, Dec 09, 2010 at 10:48:46PM -0500, Michael Gilbert wrote:
> I've isolated and applied the patches needed to fix CVE-2010-2055 in
> ghostscript. See attached debdiff.
>
> Would anyone be so kind to sponsor this? The package is at:
> http://mentors.debian.net/debian/pool/main/g/ghostscript/
I don't have time to sponsor this currently, but this should be
uploaded with urgency=low, since there's the potential that
applications rely on the old, broken behaviour.
I also remember that Jonas is still considering to introduce
Ghostscript 9.0 into Squeeze. Jonas, what's the current status?
Cheers,
Moritz
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
