[IT-SecNots] [SECURITY] [DSA 3691-1] ghostscript security update

[Salvatore Bonaccorso <carnil AT debian.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3691-1                   security AT debian.org
https://www.debian.org/security/                     Salvatore Bonaccorso
October 12, 2016                      https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : ghostscript
CVE ID         : CVE-2013-5653 CVE-2016-7976 CVE-2016-7977 CVE-2016-7978 
                 CVE-2016-7979 CVE-2016-8602
Debian Bug     : 839118 839260 839841 839845 839846 840451

Several vulnerabilities were discovered in Ghostscript, the GPL
PostScript/PDF interpreter, which may lead to the execution of arbitrary
code or information disclosure if a specially crafted Postscript file is
processed.

For the stable distribution (jessie), these problems have been fixed in
version 9.06~dfsg-2+deb8u3.

We recommend that you upgrade your ghostscript packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----

iQJ8BAEBCgBmBQJX/klsXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ0NjQ0NDA5ODA4QzE3MUUwNTUzMURERUUw
NTRDQjhGMzEzNDNDRjQ0AAoJEAVMuPMTQ89ElTcP/jptlX2llzLVWpIUiqGAnqI9
MuEhp0pnyGigMUqBnKHWHpyje7R3W9gVjHj55p1L7P6c66mEkyjamhpwC2P+9QGo
n8SrH7Ds03Y31nt22EjzQP1csfnZquM90TL/ednjEzx6gQGYDJ0fxkfVrBVb6a5t
hfDgOGNFJXRM0iYEqoDbyGHiAOnLxBS/ZtWkzoPlKV/O/ZvGVnIw/XlpnBAktR1K
b6m7UZ1NjXkVfmKqqnxt3swZHuhD8T0VAotR5F/lwA3gjgWR/WsC2SSMd6jlXkSR
UPpd932IzKIlYTR5CeCgqi1P+S65NrcnRXPaoDoDrMMxuDUqXKpTBSO8xk0LKErg
WQqWhCSFISIlSbQ6cq/T0pmsYKOWKWayNGs5F3db0Z3DjiKBbpbZ/BWpAl5X9MFH
xwurVE1GyZhHuIh1NDf34ccjvL6DVrKq+P9ZvD7RuXkkEtJyfM2urH9Gu/i6hZzm
1x3eWmeWQZ/KIQNOLr5RWzzNtwW4elwnqqDKOF8HtAAgiQsXxG6ozf2FzSm1LfYs
w9KLhFZVIVMHUroVcZtHIHSjqoo0AzCGzPTtnbC6FU/qnUjw5lBAxMrCI//I83+o
AvhFb5zTHU4800PblKH+PPoTnqLdE1/Lob6q13nMLZ+4gj8+mN73f90GaythOeox
rET1auWh4mKYGaOCqGmT
=UDOO
-----END PGP SIGNATURE-----