ghostscript 8.64~dfsg-1.1 source package in Debian

Changelog

ghostscript (8.64~dfsg-1.1) unstable; urgency=high


  * Non-maintainer upload by the Security Team.
  * This update fixes various security issues:
    - CVE-2009-0792: multiple integer overflows in the icc library
      can cause a heap-based buffer overflow possibly leading to arbitray
      code execution.
    - CVE-2009-0584/CVE-2009-0583: Multiple integer overflows causing an
      application crash or possibly arbitrary code execution.
    - CVE-2009-0196: heap-based buffer overflow in big2_decode_symbol_dict()
      leading to arbitrary code execution via a crafted JBIG2 symbol
      dictionary segment.
      .
      (Closes: #524915, #522416, #524803)

 -- Nico Golde <email address hidden>  Wed, 22 Apr 2009 00:19:51 +0200