Debian alert DLA-3931-1 (ghostscript)

From:
             
 
Sean Whitton <spwhitton@spwhitton.name>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 3931-1] ghostscript security update
Date:
             
 
Tue, 22 Oct 2024 16:36:09 +0800
Message-ID:
             
 
<87ldygfsau.fsf@melete.silentflame.com>
-------------------------------------------------------------------------
Debian LTS Advisory DLA-3931-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                         Sean Whitton
October 22, 2024                              https://wiki.debian.org/LTS
-------------------------------------------------------------------------

Package        : ghostscript
Version        : 9.53.3~dfsg-7+deb11u8
CVE ID         : CVE-2024-29508

A heap-based pointer disclosure problem was found in Ghostscript, an
interpreter for the PostScript language and for PDF.  This could lead to
information disclosure.

For Debian 11 bullseye, this problem has been fixed in version
9.53.3~dfsg-7+deb11u8.

We recommend that you upgrade your ghostscript packages.

For the detailed security status of ghostscript please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/ghostscript

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=R2TE
-----END PGP SIGNATURE-----