-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 28 Nov 2018 14:41:28 +0100 Source: ghostscript Binary: ghostscript ghostscript-x ghostscript-doc libgs9 libgs9-common libgs-dev ghostscript-dbg Architecture: source all amd64 Version: 9.06~dfsg-2+deb8u12 Distribution: jessie-security Urgency: high Maintainer: Debian Printing Team <debian-printing@lists.debian.org> Changed-By: Markus Koschany <apo@debian.org> Description: ghostscript - interpreter for the PostScript language and for PDF ghostscript-dbg - interpreter for the PostScript language and for PDF - Debug symbo ghostscript-doc - interpreter for the PostScript language and for PDF - Documentati ghostscript-x - interpreter for the PostScript language and for PDF - X11 support libgs-dev - interpreter for the PostScript language and for PDF - Development libgs9 - interpreter for the PostScript language and for PDF - Library libgs9-common - interpreter for the PostScript language and for PDF - common file Changes: ghostscript (9.06~dfsg-2+deb8u12) jessie-security; urgency=high . * Non-maintainer upload by the LTS team. * Fix CVE-2018-19409, CVE-2018-19475, CVE-2018-19476 and CVE-2018-19477. Several security vulnerabilities were discovered in Ghostscript, an interpreter for the PostScript language, which could result in denial of service, the creation of files or the execution of arbitrary code if a malformed Postscript file is processed (despite the dSAFER sandbox being enabled). Checksums-Sha1: 1847e284be1870b0347aa99206bff8e66fb22ede 3047 ghostscript_9.06~dfsg-2+deb8u12.dsc c081446726986daa14306bef5dca2ff75438cd0b 151104 ghostscript_9.06~dfsg-2+deb8u12.debian.tar.xz f13aa94a37f1629099fed538240fe13249dbd4d0 5160470 ghostscript-doc_9.06~dfsg-2+deb8u12_all.deb dc3f0554c91b29d971772853dff5de4b8292b6c7 1972882 libgs9-common_9.06~dfsg-2+deb8u12_all.deb bcdbaa2668b774cee79ad702b9f206c4b87aed6d 85712 ghostscript_9.06~dfsg-2+deb8u12_amd64.deb b2114a2a437effe74e81a8ed1b8433bf8041dd05 76574 ghostscript-x_9.06~dfsg-2+deb8u12_amd64.deb a62a6e52af6f8a026c58174962f20facc701c489 1917030 libgs9_9.06~dfsg-2+deb8u12_amd64.deb a51d78598d3e2c617a0c74a5ab22aeb4648bf671 2123310 libgs-dev_9.06~dfsg-2+deb8u12_amd64.deb 0da6c3941d5ee618e04bae82d8e4db3fbea38063 4884240 ghostscript-dbg_9.06~dfsg-2+deb8u12_amd64.deb Checksums-Sha256: 099ef5410740d818b350e1b955bb10f17c684b8f9e97a376b882942249f4f65b 3047 ghostscript_9.06~dfsg-2+deb8u12.dsc 904fef43a003ce5e9601d6cfd72b8a615aed689070a08b510b0d7505b8a10b70 151104 ghostscript_9.06~dfsg-2+deb8u12.debian.tar.xz 6d4e6db7c322f6831797d8b9a03a2830ae53ed61388c2041f12cae87d3297695 5160470 ghostscript-doc_9.06~dfsg-2+deb8u12_all.deb 9bcd393a6d8d803df405f1527c78af1c209fd7bb990c5a929946f7361002314c 1972882 libgs9-common_9.06~dfsg-2+deb8u12_all.deb 1011efe7a7f3d390b13d7d1be0ea3238dd33b5236dd46785c7766d20b5089ba0 85712 ghostscript_9.06~dfsg-2+deb8u12_amd64.deb 9e2fcb09e0c44d14e3c730a175a97d8fc58640d03851240989c6ffbd4a7f2b97 76574 ghostscript-x_9.06~dfsg-2+deb8u12_amd64.deb 08131fe54bccbe0aaa77d340d80832a692faf83dda5aa3a3b4d70813d94b9abc 1917030 libgs9_9.06~dfsg-2+deb8u12_amd64.deb 6535167fe23d2e006fcdd4e2031e020135c4e336c0faf62aa74e422dc051a273 2123310 libgs-dev_9.06~dfsg-2+deb8u12_amd64.deb 6639a068fc1b6a7d7b1af16e283ade7f90721742d93f60299310bf5824d3af00 4884240 ghostscript-dbg_9.06~dfsg-2+deb8u12_amd64.deb Files: 103e4e6bc8d3c795ead27567a96c5919 3047 text optional ghostscript_9.06~dfsg-2+deb8u12.dsc 42c1df5c7ee6d3f925991bd1665df08b 151104 text optional ghostscript_9.06~dfsg-2+deb8u12.debian.tar.xz 7ef993d9a80e7650e8197323367d7f3a 5160470 doc optional ghostscript-doc_9.06~dfsg-2+deb8u12_all.deb 15e53139d02bc41e426941bf5ef4cdcb 1972882 libs optional libgs9-common_9.06~dfsg-2+deb8u12_all.deb e23bb542fd9ba0dbc268bf9b0632e740 85712 text optional ghostscript_9.06~dfsg-2+deb8u12_amd64.deb 3fa7b5cbc79f13f343a61671c961cf87 76574 text optional ghostscript-x_9.06~dfsg-2+deb8u12_amd64.deb e1c9ab15a9aeabf80939a20d0ae4b8c7 1917030 libs optional libgs9_9.06~dfsg-2+deb8u12_amd64.deb 079df11abc00f37fc05b00883b813bdd 2123310 libdevel optional libgs-dev_9.06~dfsg-2+deb8u12_amd64.deb 4e07fdba05aa0020264d32eb84b8d58d 4884240 debug extra ghostscript-dbg_9.06~dfsg-2+deb8u12_amd64.deb -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAlv+nwFfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HkomoQAK77oNGySdv+Cenl+/eoEwProYYZAAA9eHCT zKMAaDMWr8Lu8tqRjhGaFmj19TzGOnfj7GggelcCjVzzuytfvnotQeB+eUqrKPSm xAQGi7vnLA3JpY9IKS0pBvzPyXEGOx4jQ/jfxBjgZIRdzKDHMH40Z8BHxM+lObZv QgwIkpKKj+R0gPV3RjQCs9Xsy3XfWABTcOlKE2VG5aneIMhPGSDJKOJbv+3MVRpM PB+Hd3MElg7EamrpHC83h6gdmQ5SI/Sa38V3HB0XUgf4lY8wam79Hg60lUpYPX4A GnML+vhamyRjcgr1QYHJUQ5e4hv5DPJCstIOK6A5dXZhz3sKJUj0KKDDzy2GzAHx D3Q+fMrWXE84tFv+KXbxCzQ8FO/GWVzXwgl9XGUPdA8D+uwSwUirIFb8DgoeBhWI e6hHqLUCz8SdFOGL+WeoTPQ0WgzcOy1CaTO3Q9nUis+dwIOQqHEhS52fyXe/qjj/ 0+hTYR32XqCNlDn9gPfa0X7MF4N220iNBsf1OZZiyEbCT3ddJr01r6wvAA4t8qu7 /Q7jSOxfiemHGy91yD+hHE55f1kHycoDPzJNHNNkwi/12GMntGNOkKJkSEuxiSLy EkCYvJ+BGJicg8YXhXgNfopuow1oa35F5QxW9+wr1VfajM6/HRnhysHrf1huBL0g LMR/vtSK =A3k6 -----END PGP SIGNATURE-----