Bug#745500: nvidia-settings: embedded copy of jansson
Andreas Beckmann
anbe at debian.org
Tue Apr 22 11:59:53 UTC 2014
Package: nvidia-settings
Version: 319.17-1
Severity: important
Tags: help
src:nvidia-settings (since 319.xx) contains an embedded copy of
jansson, a C library for encoding, decoding and manipulating JSON
data that is packaged separately as src:jansson in Debian.
nvidia-settings should be built against the system library instead
of the embedded copy (hoping that is an unmodified copy) to avoid
having to patch issues like CVE-2013-6401 in more than one place.
Andreas
More information about the pkg-nvidia-devel
mailing list