Your message dated Fri, 18 Feb 2011 11:26:15 +0100
with message-id <[email protected]>
and subject line Recent ghostscript use shared libjpeg
has caused the Debian Bug report #582522,
regarding libjpeg8: Please provide variant compiled with #define 
D_MAX_BLOCKS_IN_MCU 64
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
582522: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=582522
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: libjpeg8
Version: 8b-1
Severity: normal

Hi,

Ghostscript currently[1] use a local copy of libjpeg.  This is explained
in the following snippet from its documentation:

> we have also provided the ability to [link against system library]
> with the JPEG library (SHARE_JPEG), but should not use it: in order to
> be compatible with Adobe interpreters (which do not follow the JPEG
> standard exactly), Ghostscript has to compile the IJG code with the
> non-standard definition
>
>   #define D_MAX_BLOCKS_IN_MCU 64
>
> and since shared versions of this library will not have been compiled
> this way, you will get errors on some valid PostScript and PDF input
> files.

For security reasons I would prefer that the Debian packaging of
Ghostscript could link against the shared libjpeg library, which brings
me to this request:

Please provide a variant of libjpeg with above definition declared, so
that Ghostscript (and perhaps other projects as well?) can use the
shared code while still staying compatible with non-standard Adobe
Postscript files.


Kind regards,

 - Jonas

Ghostscript package maintainer


[1] Actually, right now ghostscript links against shared libjpeg62, but
bug#582417 made me look closer and realize that this is bad, so propably
will switch back to using the internal code if this issue cannot be
solved quick.



--- End Message ---
--- Begin Message ---
Version: 9.01~dfsg-1

Ghostscript since version 9.01~dfsg-1 links against system shared libjpeg - favoring the security concern (a.k.a. inconvenience) of duplicated code higher than that of respecting ancient standards violations of commercial PDF generator implementations.


 - Jonas

--
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private

Attachment: signature.asc
Description: Digital signature


--- End Message ---

Reply via email to