[Bug 1301215] [NEW] Sync a2ps 1:4.14-1.3 (universe) from Debian unstable (main)

Launchpad Bug Tracker 1301215 at bugs.launchpad.net
Wed Apr 2 07:57:29 UTC 2014


You have been subscribed to a public bug by Jackson Doak (noskcaj):

Please sync a2ps 1:4.14-1.3 (universe) from Debian unstable (main)

Changelog entries since current trusty version 1:4.14-1.2:

a2ps (1:4.14-1.3) unstable; urgency=high

  * Non-maintainer upload.
  * Add CVE-2014-0466.diff patch.
    CVE-2014-0466: fixps does not invoke gs with -dSAFER. A malicious
    PostScript file could delete files with the privileges of the invoking
    user.
    Thanks to brian m. carlson <sandals at crustytoothpaste.net> (Closes: #742902)

 -- Salvatore Bonaccorso <carnil at debian.org>  Sun, 30 Mar 2014 09:09:07
+0200

** Affects: a2ps (Ubuntu)
     Importance: Wishlist
         Status: New

-- 
Sync a2ps 1:4.14-1.3 (universe) from Debian unstable (main)
https://bugs.launchpad.net/bugs/1301215
You received this bug notification because you are a member of Ubuntu Sponsors Team, which is subscribed to the bug report.



More information about the Ubuntu-sponsors mailing list