Accepted ghostscript 9.06~dfsg-2+deb8u9 (source all amd64) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 26 Sep 2018 15:24:02 +0200
Source: ghostscript
Binary: ghostscript ghostscript-x ghostscript-doc libgs9 libgs9-common libgs-dev ghostscript-dbg
Architecture: source all amd64
Version: 9.06~dfsg-2+deb8u9
Distribution: jessie-security
Urgency: high
Maintainer: Debian Printing Team <debian-printing@lists.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
ghostscript - interpreter for the PostScript language and for PDF
ghostscript-dbg - interpreter for the PostScript language and for PDF - Debug symbo
ghostscript-doc - interpreter for the PostScript language and for PDF - Documentati
ghostscript-x - interpreter for the PostScript language and for PDF - X11 support
libgs-dev - interpreter for the PostScript language and for PDF - Development
libgs9 - interpreter for the PostScript language and for PDF - Library
libgs9-common - interpreter for the PostScript language and for PDF - common file
Changes:
ghostscript (9.06~dfsg-2+deb8u9) jessie-security; urgency=high
.
* Fix CVE-2018-16543 and CVE-2018-17183:
This is a follow-up update for the recently discovered -dSAFER issues
reported by Tavis Ormandy.
Tavis Ormandy discovered multiple vulnerabilites in Ghostscript, an
interpreter for the PostScript language, which could result in denial of
service, the creation of files or the execution of arbitrary code if a
malformed Postscript file is processed (despite the dSAFER sandbox being
enabled).
* Use the txtwrite device for ps2ascii from now on to prevent an error due to
the fix for CVE-2018-17183.
Checksums-Sha1:
dd0cde0ad6e705adf9fba28f4c1a9082e9a20207 3043 ghostscript_9.06~dfsg-2+deb8u9.dsc
a4ffa0b94d3415782e4543d2c942453f2cf31ec5 131712 ghostscript_9.06~dfsg-2+deb8u9.debian.tar.xz
6dc3e06461bdfb9abc57df282cf26697187ded75 5160148 ghostscript-doc_9.06~dfsg-2+deb8u9_all.deb
905fd37eac7c690e1a996cd5543b933e1f034626 1971790 libgs9-common_9.06~dfsg-2+deb8u9_all.deb
fc674c9fc718de6d643943c421112c9db4edaa27 85552 ghostscript_9.06~dfsg-2+deb8u9_amd64.deb
f613382dd84af55e20475acdab4982a671cec1e9 76418 ghostscript-x_9.06~dfsg-2+deb8u9_amd64.deb
31b736ad6683e3a1cd2d0160aaf0555b31954e57 1914836 libgs9_9.06~dfsg-2+deb8u9_amd64.deb
0626b19baf70f11094a68ad1f6f34204a8643e7a 2122582 libgs-dev_9.06~dfsg-2+deb8u9_amd64.deb
d6c9f2e5e9e90f2dd17ec7acf8749826d7e5011e 4883158 ghostscript-dbg_9.06~dfsg-2+deb8u9_amd64.deb
Checksums-Sha256:
bfbc8901045d07c73cfb8b1923faba2589592eb489cf262ac79a68a87a83b992 3043 ghostscript_9.06~dfsg-2+deb8u9.dsc
be1a5948498f5731e4858f5f80b60eca5b6151e41ebc276589621b3fec50361e 131712 ghostscript_9.06~dfsg-2+deb8u9.debian.tar.xz
6b1b43fefb26c0eea1d83043c98c196e97db651830f7193f30a9cdc769e4b803 5160148 ghostscript-doc_9.06~dfsg-2+deb8u9_all.deb
a25b0e424a8787fbf7f5703b4d3327cb764e748a706ec6be424b724450fd9b03 1971790 libgs9-common_9.06~dfsg-2+deb8u9_all.deb
12d7612022eba833c51b1a616b399bf2c67a3606981fd278e9f16b5b2772af2f 85552 ghostscript_9.06~dfsg-2+deb8u9_amd64.deb
d721a1028e565b9adc38a7acca07e7d714481ac11d6203c3c8fe43a7168c25bc 76418 ghostscript-x_9.06~dfsg-2+deb8u9_amd64.deb
292e4e9aadce5d73644e4b80280eb6156b181a87178cc3229076f6dfd279bd50 1914836 libgs9_9.06~dfsg-2+deb8u9_amd64.deb
ced809bb6513481d2a692bd55fe691a62c142182e050028185714cf6ef782b0d 2122582 libgs-dev_9.06~dfsg-2+deb8u9_amd64.deb
6dc57aa026ad76cbd34d4c852f4d0761e2f9231db68a27e16791aed2f7cf5e44 4883158 ghostscript-dbg_9.06~dfsg-2+deb8u9_amd64.deb
Files:
6673a6f8e88880e04ddc826e8d382566 3043 text optional ghostscript_9.06~dfsg-2+deb8u9.dsc
16d7b3b3e605ca1fc1d5fcc2cd71bc31 131712 text optional ghostscript_9.06~dfsg-2+deb8u9.debian.tar.xz
f92bb2e986415341658ad3f032bd48f3 5160148 doc optional ghostscript-doc_9.06~dfsg-2+deb8u9_all.deb
2f54aa57dccb1e1496ff9b8605afb171 1971790 libs optional libgs9-common_9.06~dfsg-2+deb8u9_all.deb
295cac121c7087b1af68bd76043b4b42 85552 text optional ghostscript_9.06~dfsg-2+deb8u9_amd64.deb
4f62a7a9b85dfd74989ccd944f981408 76418 text optional ghostscript-x_9.06~dfsg-2+deb8u9_amd64.deb
8583bce4435a6992656bd8c0e7beb30e 1914836 libs optional libgs9_9.06~dfsg-2+deb8u9_amd64.deb
f5d3b57b1f18f57401e95af7219f6f14 2122582 libdevel optional libgs-dev_9.06~dfsg-2+deb8u9_amd64.deb
c4e4878e311d3b45e29cd1b7e941f773 4883158 debug extra ghostscript-dbg_9.06~dfsg-2+deb8u9_amd64.deb
-----BEGIN PGP SIGNATURE-----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=B7p5
-----END PGP SIGNATURE-----