Bug#745500: nvidia-settings: embedded copy of jansson

Andreas Beckmann anbe at debian.org
Tue Apr 22 11:59:53 UTC 2014


Package: nvidia-settings
Version: 319.17-1
Severity: important
Tags: help

src:nvidia-settings (since 319.xx) contains an embedded copy of
jansson, a C library for encoding, decoding and manipulating JSON
data that is packaged separately as src:jansson in Debian.

nvidia-settings should be built against the system library instead
of the embedded copy (hoping that is an unmodified copy) to avoid
having to patch issues like CVE-2013-6401 in more than one place.


Andreas



More information about the pkg-nvidia-devel mailing list