It was discovered that Ghostscript, the GPL PostScript/PDF interpreter,
does not properly validate access for the "%pipe%", "%handle%" and
"%printer%" io devices, which could result in the execution of arbitrary
code if a malformed Postscript file is processed (despite the -dSAFER
sandbox being enabled).
For the stable distribution (bullseye), this problem has been fixed in
We recommend that you upgrade your ghostscript packages.