[Secure-testing-team] Additions to EmbeddedCodeCopies

Sven Eckelmann sven at narfation.org
Mon Jul 9 15:51:21 UTC 2012


Hi,

I would like to let the secure testing team know that there are some 
additional (used) code copies in following packets:

 * mupen64plus-core: the files src/main/zip/crypt.h  src/main/zip/ioapi.c
   src/main/zip/ioapi.h  src/main/zip/unzip.c  src/main/zip/unzip.h
   src/main/zip/zip.c  src/main/zip/zip.h are from zlib (contrib/minizip) and
   are used because http://bugs.debian.org/574798 is not fixed

 * exactimage uses embedded copies of codecs/jinclude.h
   codecs/jpegint.h codecs/transupp.c codecs/transupp.h from libjpeg because
   it needs the functionality to modify the picture without loosing precision
   and libjpeg doesn't export it

 * batctl embeds modified versions of debugfs.c and debugfs.h from perf to
   control the debugfs vfs and no library is known to do this for batctl

Kind regards,
	Sven
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20120709/416e6465/attachment.pgp>


More information about the Secure-testing-team mailing list