DSA-1746-1

NameDSA-1746-1
SourceDebian
Descriptionghostscript gs-gpl - arbitrary code execution
ReferencesCVE-2009-0583, CVE-2009-0584
Debian/oldstablenot vulnerable
Debian/stablenot vulnerable
Debian/testingnot known to be vulnerable
Debian/unstablenot known to be vulnerable.

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
ghostscript (PTS)lenny, lenny (security)8.62.dfsg.1-3.2lenny1fixed
gs-gpl (PTS)etch, etch (security)8.54.dfsg.1-5etch2fixed

The next table lists affected binary packages.

Binary PackageReleaseVersionStatusArchitecures
ghostscript, ghostscript-x, libgs-dev, libgs8lenny, lenny (security)8.62.dfsg.1-3.2lenny1fixedalpha, amd64, arm, armel, hppa, i386, ia64, mips, mipsel, powerpc, s390, sparc
ghostscript-doc, gs, gs-aladdin, gs-common, gs-esp, gs-gpllenny, lenny (security)8.62.dfsg.1-3.2lenny1fixedall
gsetch, etch (security)8.54.dfsg.1-5etch2fixedall
gs-gpletch, etch (security)8.54.dfsg.1-5etch2fixedalpha, amd64, arm, hppa, i386, ia64, mips, mipsel, powerpc, s390, sparc

The information above is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
ghostscriptsourcelenny8.62.dfsg.1-3.2lenny1unknown
gs-gplsourceetch8.54.dfsg.1-5etch2unknown

Search for package or bug name: Reporting problems

Home - Testing Security Team - Debian Security - Imprint