Paul Szabo
2010-Jun-01 01:18 UTC
[Secure-testing-team] Bug#584032: scribus: Security bugs in ghostscript
Package: scribus Severity: grave Tags: security Justification: user security hole Please note remote execute-any-code security bugs in ghostscript: http://bugs.debian.org/583183 This package depends on ghostscript, and may be affected. Please evaluate the security of this package, and fix if needed. Thanks, Paul Szabo psz at maths.usyd.edu.au http://www.maths.usyd.edu.au/u/psz/ School of Mathematics and Statistics University of Sydney Australia -- System Information: Debian Release: 5.0.4 APT prefers stable APT policy: (500, ''stable'') Architecture: i386 (i686) Kernel: Linux 2.6.26-pk03.17-svr (SMP w/8 CPU cores) Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Shell: /bin/sh linked to /bin/bash Versions of packages scribus depends on: ii ghostscript-x [gs- 8.62.dfsg.1-3.2lenny1 The GPL Ghostscript PostScript/PDF ii gs 8.62.dfsg.1-3.2lenny1 Transitional package ii gs-aladdin 8.62.dfsg.1-3.2lenny1 Transitional package ii gsfonts-x11 0.21 Make Ghostscript fonts available t ii libc6 2.7-18lenny2 GNU C Library: Shared libraries ii libjpeg62 6b-14 The Independent JPEG Group''s JPEG ii liblcms1 [liblcms] 1.17.dfsg-1+lenny2 Color management library pn libpng2 <none> (no description available) pn libqt2 <none> (no description available) pn libstdc++2.10-glib <none> (no description available) pn libtiff3g <none> (no description available) pn xlibs <none> (no description available) ii zlib1g 1:1.2.3.3.dfsg-12 compression library - runtime scribus recommends no packages. Versions of packages scribus suggests: pn scribus-doc-de <none> (no description available) pn scribus-doc-en <none> (no description available) pn scribus-doc-fr <none> (no description available)