Format: 1.8 Date: Thu, 27 Apr 2017 16:00:11 -0700 Source: ghostscript Binary: ghostscript ghostscript-x ghostscript-doc libgs9 libgs9-common libgs-dev ghostscript-dbg Architecture: amd64 all Version: 9.19~dfsg+1-0ubuntu8 Distribution: artful-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Steve Beattie Description: ghostscript - interpreter for the PostScript language and for PDF ghostscript-dbg - interpreter for the PostScript language and for PDF - Debug symbo ghostscript-doc - interpreter for the PostScript language and for PDF - Documentati ghostscript-x - interpreter for the PostScript language and for PDF - X11 support libgs-dev - interpreter for the PostScript language and for PDF - Development libgs9 - interpreter for the PostScript language and for PDF - Library libgs9-common - interpreter for the PostScript language and for PDF - common file Changes: ghostscript (9.19~dfsg+1-0ubuntu8) artful; urgency=medium . * SECURITY UPDATE: invalid handling of parameters to .eqproc and .rsdparams allowed disabling -dSAFER and thus code execution - debian/patches/CVE-2017-8291-1.patch: check .eqproc parameters - debian/patches/CVE-2017-8291-2.patch: check .rsdparams parameters - CVE-2017-8291 * SECURITY UPDATE: use-after-free in color management module. - CVE-2016-10217.patch: Dont create new ctx when pdf14 device reenabled - CVE-2016-10217 * SECURITY UPDATE: divide-by-zero error denial of service in base/gxfill.c - CVE-2016-10219.patch: check for 0 in denominator - CVE-2016-10219 * SECURITY UPDATE: null pointer dereference denial of service - CVE-2016-10220.patch: initialize device data structure correctly - CVE-2016-10220 * SECURITY UPDATE: null pointer dereference denial of service - CVE-2017-5951.patch: use the correct param list enumerator - CVE-2017-5951 * SECURITY UPDATE: null pointer dereference denial of service - CVE-2017-7207.patch: ensure a device has raster memory, before trying to read it - CVE-2017-7207 Checksums-Sha1: fc25b025758eda3fa96c04f01dbe54751812f494 11877064 ghostscript-dbg_9.19~dfsg+1-0ubuntu8_amd64.deb 9d694d5a6b485492b1a4dd3901116f31350a112a 5525868 ghostscript-doc_9.19~dfsg+1-0ubuntu8_all.deb 1ca34794a5fb0f4fee385bfc385cb26f2b61290f 43294 ghostscript-x_9.19~dfsg+1-0ubuntu8_amd64.deb 5534756c4cc88eaf4888166179cb36293b099367 13781 ghostscript_9.19~dfsg+1-0ubuntu8_amd64.buildinfo debab2bb503a7549ebbe58683094a1bd4de1e039 50036 ghostscript_9.19~dfsg+1-0ubuntu8_amd64.deb 20355c415e97bac764f17af109d51ab97054532a 2377298 libgs-dev_9.19~dfsg+1-0ubuntu8_amd64.deb cb29c32d28232b363122e1eedafe3ccae535c427 2988586 libgs9-common_9.19~dfsg+1-0ubuntu8_all.deb 8e077380ed6c00831674a1fb989d5cc03add842d 2100376 libgs9_9.19~dfsg+1-0ubuntu8_amd64.deb Checksums-Sha256: 3d253caf5627264bac69d1234aef5f8364266832f74181aea94ffa56d2c70333 11877064 ghostscript-dbg_9.19~dfsg+1-0ubuntu8_amd64.deb 423f21a6acc693e5f552d00657d131062fe366852f076250623702fda3fcf626 5525868 ghostscript-doc_9.19~dfsg+1-0ubuntu8_all.deb cf6b93f13ab2e373a72d1b989d4d880a62c215213d7ba6aa0dcb9fa74dfc34e9 43294 ghostscript-x_9.19~dfsg+1-0ubuntu8_amd64.deb 35ea633ebc02c302567e917b4635becde29bc17b307e54b2d9694ddec4e5d116 13781 ghostscript_9.19~dfsg+1-0ubuntu8_amd64.buildinfo c2cfcb46c71c4890cd2df5a1a1e6e00125f23ac3ef9125f3283658ef70ac37b8 50036 ghostscript_9.19~dfsg+1-0ubuntu8_amd64.deb 314655b13422eb896f46c35cdc7e7b0f7d07140710e3896c0a9ee8a16ae8582a 2377298 libgs-dev_9.19~dfsg+1-0ubuntu8_amd64.deb ef831bceb55034007f6b912b36a407c2c5b2fd79b2596da37f4aabe07f89e2b3 2988586 libgs9-common_9.19~dfsg+1-0ubuntu8_all.deb ef8e004050ec2a44b6bd641fc3eb7fc7127e42e347b0d23112c763f5e284d7a8 2100376 libgs9_9.19~dfsg+1-0ubuntu8_amd64.deb Files: e85200da4bf868563e2895082a0da638 11877064 debug extra ghostscript-dbg_9.19~dfsg+1-0ubuntu8_amd64.deb 4958c36a47a9a6b7b6fe9112b1255aae 5525868 doc optional ghostscript-doc_9.19~dfsg+1-0ubuntu8_all.deb 3702e162b04fb8331076c1b37db2f7d5 43294 text optional ghostscript-x_9.19~dfsg+1-0ubuntu8_amd64.deb 00fa02493ef04d9c585a077f81b18289 13781 text optional ghostscript_9.19~dfsg+1-0ubuntu8_amd64.buildinfo 16031fa0559d3c7c38f3529e03788cbd 50036 text optional ghostscript_9.19~dfsg+1-0ubuntu8_amd64.deb 90a9c817277832a8a35cde080e707687 2377298 libdevel optional libgs-dev_9.19~dfsg+1-0ubuntu8_amd64.deb 1da649f6205418fbd2b1bcedf9aebaeb 2988586 libs optional libgs9-common_9.19~dfsg+1-0ubuntu8_all.deb 647ed71ed546e4a84cd7624c7b7598b4 2100376 libs optional libgs9_9.19~dfsg+1-0ubuntu8_amd64.deb Original-Maintainer: Debian Printing Team