Bug#964090: Please upload backport

2020-12-15 Thread MJ Ray
On 13 December 2020 20:19:42 UTC, Salvatore Bonaccorso wrote: >Hi, > >Cc'in the security-team alias. > >It is actually unlikely for the moment that we will revert the >200-disable-ghostscript-formats.patch patch again, which was firstly >included in the 8:6.9.10.23+dfsg-2.1+deb10u1 upload. It

Bug#964090: Please upload backport

2020-12-15 Thread Moritz Muehlenhoff
On Tue, Dec 15, 2020 at 10:32:25AM +0100, Bastien ROUCARIES wrote: > Hi, > > I agree with salvatore, that in general disabling pdf is the safer solution. Yeah, this was intentionally, but I missed an entry for this in debian/changelog. > I am slowly recovering from work debt due to covid 19 lo

Bug#964090: Please upload backport

2020-12-15 Thread Bastien ROUCARIES
Hi, I agree with salvatore, that in general disabling pdf is the safer solution. I am slowly recovering from work debt due to covid 19 lockdown in France (i was locked down three month, and I could only work by night for payjob so debian work was not done), but I will accept patch. The solution

Bug#964090: Please upload backport

2020-12-13 Thread Salvatore Bonaccorso
Hi, Cc'in the security-team alias. On Wed, Oct 07, 2020 at 01:15:23PM -0700, Felix Lechner wrote: > Control: tags -1 + patch > > Hi, > > > Is this because of a ghostscript vulnerability? > > The PDF policy restriction is also in effect on Debian stable even > though that release ships with Gho

Bug#964090: Please upload backport

2020-12-10 Thread Pavel Sanda
On Wed, 7 Oct 2020 13:15:23 -0700 Felix Lechner wrote: > Control: tags -1 + patch > > Hi, > > > Is this because of a ghostscript vulnerability? > > The PDF policy restriction is also in effect on Debian stable even > though that release ships with Ghostscript 9.27, which online sources > sugge

Bug#964090: Please upload backport

2020-10-07 Thread Felix Lechner
Control: tags -1 + patch Hi, > Is this because of a ghostscript vulnerability? The PDF policy restriction is also in effect on Debian stable even though that release ships with Ghostscript 9.27, which online sources suggest is safe. [1] Converting images to PDF is a very common functionality. P