-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 09 Sep 2019 11:33:35 +0200 Source: ghostscript Binary: ghostscript ghostscript-x ghostscript-doc libgs9 libgs9-common libgs-dev ghostscript-dbg Architecture: source all amd64 Version: 9.26a~dfsg-0+deb8u5 Distribution: jessie-security Urgency: medium Maintainer: Debian Printing Team <debian-printing@lists.debian.org> Changed-By: Emilio Pozuelo Monfort <pochu@debian.org> Description: ghostscript - interpreter for the PostScript language and for PDF ghostscript-dbg - interpreter for the PostScript language and for PDF - Debug symbo ghostscript-doc - interpreter for the PostScript language and for PDF - Documentati ghostscript-x - interpreter for the PostScript language and for PDF - X11 support libgs-dev - interpreter for the PostScript language and for PDF - Development libgs9 - interpreter for the PostScript language and for PDF - Library libgs9-common - interpreter for the PostScript language and for PDF - common file Changes: ghostscript (9.26a~dfsg-0+deb8u5) jessie-security; urgency=medium . * Non-maintainer upload by the LTS Team. * Backport changes from stretch: * make .forceput inaccessible (CVE-2019-14811, CVE-2019-14812, CVE-2019-14813) * Issue an error message if an ExtGstate is not found * PDF interpreter - review .forceput security (CVE-2019-14817) Checksums-Sha1: a8c54027cfa81226ad834e162fe485ef67935f8c 2885 ghostscript_9.26a~dfsg-0+deb8u5.dsc 3bc2fd605063bfd1dcd481b54a81159cb1f33a7e 17614652 ghostscript_9.26a~dfsg.orig.tar.xz 010010987724fc0cd4705550890a23ba38167367 123416 ghostscript_9.26a~dfsg-0+deb8u5.debian.tar.xz 99d0b4c247bb902192148581d80a2ee0de8884c7 3484314 ghostscript-doc_9.26a~dfsg-0+deb8u5_all.deb b4f386c5d4e7a767084e8640091b3f6dd4c1d23c 5145004 libgs9-common_9.26a~dfsg-0+deb8u5_all.deb 67042ed670cc0acf78dcf5bb95d5a8b5e2c479da 98862 ghostscript_9.26a~dfsg-0+deb8u5_amd64.deb a895513e485ce586590a067cecab8f2ba9543a13 94292 ghostscript-x_9.26a~dfsg-0+deb8u5_amd64.deb 9981c16c12cdd40efc1a434978af756d06501307 2210760 libgs9_9.26a~dfsg-0+deb8u5_amd64.deb a478656f1c1d0995a8630c9abe73a27488bdb308 76488 libgs-dev_9.26a~dfsg-0+deb8u5_amd64.deb 94d6cd13877c98865ab13cf5e3eb5d77429c90dc 5761550 ghostscript-dbg_9.26a~dfsg-0+deb8u5_amd64.deb Checksums-Sha256: 199f2f40002019b97a05919405b20c586d9c1ab480ad0566e070212dd3c865d7 2885 ghostscript_9.26a~dfsg-0+deb8u5.dsc 1c3647c42a3f894df22a7a12473f60ff4be38c38ed97232ecfab9b7f3a4fc8f4 17614652 ghostscript_9.26a~dfsg.orig.tar.xz 39cbad7dfeefc6636608ed8a799e4e2b2a5ec51bb1de9b46039a187dd12753d0 123416 ghostscript_9.26a~dfsg-0+deb8u5.debian.tar.xz 06a2f54ac1131d638dda8527f892d0a8e420f527cca01d197744e0b515e466d3 3484314 ghostscript-doc_9.26a~dfsg-0+deb8u5_all.deb e87b87e79d62886ad4a1aba9ff0b7e2d7422b423d32998c5ee0e61e888e1a798 5145004 libgs9-common_9.26a~dfsg-0+deb8u5_all.deb ca00a223324198a4ca8580f70a214d7782b9b512bcd34b41579827572c2eceb6 98862 ghostscript_9.26a~dfsg-0+deb8u5_amd64.deb 6769223341bae39ce6374dd0621116891bfccb5473725ec1045f5452af59710f 94292 ghostscript-x_9.26a~dfsg-0+deb8u5_amd64.deb f46d9b8fcdc238712aa9443c18e3d002c34a0fadf568523a95e9dd9c94978396 2210760 libgs9_9.26a~dfsg-0+deb8u5_amd64.deb 0112613777f2cfd2472d90d03c491976fde9069f76f41344f1a8e612198bdf4b 76488 libgs-dev_9.26a~dfsg-0+deb8u5_amd64.deb e55128df006c7d437a7305f8912b970151e59484002a388ab75f357aa8acdb03 5761550 ghostscript-dbg_9.26a~dfsg-0+deb8u5_amd64.deb Files: f781f222239c2890b49fd366e259edde 2885 text optional ghostscript_9.26a~dfsg-0+deb8u5.dsc 93cc537385e51eee94b96102616e338a 17614652 text optional ghostscript_9.26a~dfsg.orig.tar.xz d627c0dba58103bcc56d478292bde74f 123416 text optional ghostscript_9.26a~dfsg-0+deb8u5.debian.tar.xz 032f1f41e9026bb4577e3c8de2583c9f 3484314 doc optional ghostscript-doc_9.26a~dfsg-0+deb8u5_all.deb 310fd1ef8f5d8f03616e98fc383821db 5145004 libs optional libgs9-common_9.26a~dfsg-0+deb8u5_all.deb b32f22afeecd6227934325a8521abe3d 98862 text optional ghostscript_9.26a~dfsg-0+deb8u5_amd64.deb e76763c2d7670541cd70b48b2b02d0ca 94292 text optional ghostscript-x_9.26a~dfsg-0+deb8u5_amd64.deb aa2ed5bdefe9d8aa3440511c3d551756 2210760 libs optional libgs9_9.26a~dfsg-0+deb8u5_amd64.deb 3886e2762ca1551b206621808eac9950 76488 libdevel optional libgs-dev_9.26a~dfsg-0+deb8u5_amd64.deb 2c38c890d6d85602bdeb905de900338e 5761550 debug extra ghostscript-dbg_9.26a~dfsg-0+deb8u5_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAl12OOEACgkQnUbEiOQ2 gwL72w/+IKlRpVPSEsf3jqU294t4F3gCTNfkwW6QU3EsiqliabqaLSVJtpEP0xE7 OBAdQcdKwB9KbWK/uBOufnusViG/yOmdXLf6FyMxGyCKsmLYk1VicTtsTuKgTSCX X34DqRG4GMIeMwyS1E1zID2Kk8qoaw+nLylJD+oLE6YetAU4EiAhu5U9slWot3fh ok2qinN70sQ4LIm8pbWpVSU7N3WRHP6dOs5SpbPT7qiy3Cxn143a2011zem416lx 2vI93AOhVcGt7oD9753sAt2kkx9rub2OAyXb/lBbGc4PlEUQ8I1ujlLWy4cRCQrm arP+xi5c+m+ZdvjekqzBuaRFsUtmAGKjgdehree3nDtV/W2SGt5bw96V1dXGBl4P kV+OkdGrcdvDDxhMpD5vNV7Uii4YHqRZYGV7FJbzfmh5O+gMDEPtLVJJtKX7KSjf a6vHHc/wcmLsBk5uBFvEIylbBUyNNzuL2og0AIFsjEADbr3csW0XxJ9gX2MQARGm owPaNvs3FN8k/VqWkApugHNrJmsSJNDEe+YOml1n+LR5sOqNg7PnvYJCuUGUC2H5 vlsxS3lsB8sSExZnnsw10WkV4WCMBOwst3A4AptXPLaxZX2bBkFjMEXLiO+pvIEE dbqR+lNHt/yeOGaWFEKUuqxvzJjM6SNTcdFydfaqc3DGugrNVOY= =GPw5 -----END PGP SIGNATURE-----