Security: does not honour -P-, and is not default

Bug #605211 reported by Paul Szabo
260
This bug affects 1 person
Affects Status Importance Assigned to Milestone
GS-GPL
Fix Released
Critical
ghostscript (Debian)
Fix Released
Unknown
ghostscript (Ubuntu)
Fix Released
Medium
Unassigned

Bug Description

Binary package hint: ghostscript

Please see
  http://bugs.debian.org/583183
for details and references, including
  http://bugs.debian.org/584653
  http://bugs.debian.org/584663
  http://bugs.debian.org/584667

Thanks, Paul

Paul Szabo <email address hidden> http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics University of Sydney Australia

CVE References

Paul Szabo (psz-maths)
visibility: private → public
Changed in ghostscript (Ubuntu):
status: New → Confirmed
importance: Undecided → Medium
Revision history for this message
Till Kamppeter (till-kamppeter) wrote :

There exists also an upstream report, but this is not yet fixed. Upstream task added.

Revision history for this message
Till Kamppeter (till-kamppeter) wrote :

Upstream fixed it some minutes ago on the SVN repository, but along with many other changes, especially ICC support. So a patch for 8.72 cannot get extracted easily.

Changed in gs-gpl:
status: Unknown → Fix Released
Changed in gs-gpl:
importance: Unknown → Critical
Changed in ghostscript (Ubuntu):
status: Confirmed → Triaged
Revision history for this message
Till Kamppeter (till-kamppeter) wrote :

We are at Ghostscript 9.04 already in Oneiric so the fix is already inplace in the upstream code. Closing...

Changed in ghostscript (Ubuntu):
status: Triaged → Fix Released
Changed in ghostscript (Debian):
status: Unknown → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.