Thanks for the heads-up! We will prepare updates. Is there a reason that ghostscript doesn't link against the system libjasper instead?
** Changed in: ghostscript (Ubuntu) Importance: Undecided => Medium Assignee: (unassigned) => Kees Cook (keescook) Status: New => Confirmed ** Visibility changed to: Public -- internal jasper should be patched for CVE-2007-2721 https://bugs.launchpad.net/bugs/153765 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs