[Secure-testing-team] Bug#862779: ghostscript: Regression caused by CVE-2017-8291 fix: breaks pstoedit when using DELAYBIND feature

Salvatore Bonaccorso carnil at debian.org
Tue May 16 20:26:08 UTC 2017


Package: ghostscript
Version: 9.20~dfsg-3.1
Severity: serious
Tags: patch security upstream fixed-upstream
Justification: regression
Forwarded: https://bugs.ghostscript.com/show_bug.cgi?id=697846

Hi

The update in unstable for ghostscript breaks pstoedit when using
DELAYBIND feature.

Details: https://bugs.ghostscript.com/show_bug.cgi?id=697846

and originally reported in Ubuntu as:

https://bugs.launchpad.net/ubuntu/+source/ghostscript/+bug/1687614

Fix:
http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=57f20719

AFAICT, this does only apply to stretch/sid, but not to jessie (but
needs another review).

Regards,
Salvatore



More information about the Secure-testing-team mailing list