Accepted pstotext 1.9-2 (source i386)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Wed, 27 Jul 2005 18:43:55 +0200
Source: pstotext
Binary: pstotext
Architecture: source i386
Version: 1.9-2
Distribution: unstable
Urgency: high
Maintainer: J.H.M. Dassen (Ray) <jdassen@debian.org>
Changed-By: J.H.M. Dassen (Ray) <jdassen@debian.org>
Description:
pstotext - Extract text from PostScript and PDF files
Changes:
pstotext (1.9-2) unstable; urgency=high
.
* [main.c] Security fix: call Ghostscript with -dSAFER to prevent malicious
PostScript data from altering the filesystem or opening pipes to arbitrary
external programs. This problem was remotely exploitable (through
pstotext's registration with /etc/mailcap as a viewer application).
The problem was identified and patched by Max Vozeler <xam@debian.org>.
Files:
4d77fe5ccbd549fb69a1197827480910 554 text optional pstotext_1.9-2.dsc
46121c74b21bec459e75b49eb1689b87 7884 text optional pstotext_1.9-2.diff.gz
701e93aafc3d581cdf7b6944a2be8326 31938 text optional pstotext_1.9-2_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
iD8DBQFC57zTA+HB2Re6Rc4RAh1FAJ4qSHNKGDBQOSBhQB++MIaBXVZFdwCg7cIc
vMytnRMClA8CqP8QsaGyHTI=
=Z8IJ
-----END PGP SIGNATURE-----
Accepted:
pstotext_1.9-2.diff.gz
to pool/main/p/pstotext/pstotext_1.9-2.diff.gz
pstotext_1.9-2.dsc
to pool/main/p/pstotext/pstotext_1.9-2.dsc
pstotext_1.9-2_i386.deb
to pool/main/p/pstotext/pstotext_1.9-2_i386.deb
--
To UNSUBSCRIBE, email to debian-devel-changes-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org