Format: 1.8 Date: Wed, 05 Jul 2023 12:56:27 -0400 Source: ghostscript Binary: ghostscript ghostscript-dbg ghostscript-x libgs-dev libgs9 Architecture: s390x Version: 9.50~dfsg-5ubuntu4.8 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: ghostscript - interpreter for the PostScript language and for PDF ghostscript-dbg - interpreter for the PostScript language and for PDF - Debug symbo ghostscript-x - interpreter for the PostScript language and for PDF - X11 support libgs-dev - interpreter for the PostScript language and for PDF - Development libgs9 - interpreter for the PostScript language and for PDF - Library Changes: ghostscript (9.50~dfsg-5ubuntu4.8) focal-security; urgency=medium . * SECURITY UPDATE: incorrect permission validation for pipe devices - debian/patches/CVE-2023-36664-pre1.patch: improve handling of current directory permissions in base/gpmisc.c. - debian/patches/CVE-2023-36664-pre2.patch: fix gp_file allocations to use thread_safe_memory in base/gpmisc.c. - debian/patches/CVE-2023-36664-1.patch: don't reduce pipe file names for permission validation in base/gpmisc.c, base/gslibctx.c. - debian/patches/CVE-2023-36664-2.patch: fix logic and add extra test in base/gpmisc.c, base/gslibctx.c. - CVE-2023-36664 Checksums-Sha1: 837311bcb25706999dd83f5d388700aa6a4d2d83 16900484 ghostscript-dbg_9.50~dfsg-5ubuntu4.8_s390x.deb 918c01252db12b2cd48be13136d515bf04169103 42904 ghostscript-x_9.50~dfsg-5ubuntu4.8_s390x.deb 3877690c31a5f06080a174bffce1543e95b9527f 12768 ghostscript_9.50~dfsg-5ubuntu4.8_s390x.buildinfo 8005ae2bef7696bb345095739b4608d0b75d5f3a 51772 ghostscript_9.50~dfsg-5ubuntu4.8_s390x.deb b0c5c39cf65f30e3a32dea1110ae7dc96d3b7620 27372 libgs-dev_9.50~dfsg-5ubuntu4.8_s390x.deb cbe7b84ba59cd8accc5caeff13a53c574995d745 2014392 libgs9_9.50~dfsg-5ubuntu4.8_s390x.deb Checksums-Sha256: d5b48eece11ffb9a5b52a28c75d8f99c4a46c2c28a0654461790d05c274b422d 16900484 ghostscript-dbg_9.50~dfsg-5ubuntu4.8_s390x.deb 10b5629f40dc9db5d16234a3d6128d1c7142ece8672cde41108c0b9139503444 42904 ghostscript-x_9.50~dfsg-5ubuntu4.8_s390x.deb ea483407383135dc3e572416ee47af5e3fc9a12b2c01857cb77d9aad0286714d 12768 ghostscript_9.50~dfsg-5ubuntu4.8_s390x.buildinfo 75d58862076b769926939ec06fa29272a1d62a2c9ed57d93a0343b5cb66b6c69 51772 ghostscript_9.50~dfsg-5ubuntu4.8_s390x.deb 3226f365a6b58f1a5b316dc20104cc93edaee770d618e0d5c48b045b6efb6fa8 27372 libgs-dev_9.50~dfsg-5ubuntu4.8_s390x.deb 78dff7d15dc58abb202633d9020233b8efe80cbfb13d844c139cd9812a625df5 2014392 libgs9_9.50~dfsg-5ubuntu4.8_s390x.deb Files: da539d8e768ff4770b4ea94463862dbf 16900484 debug optional ghostscript-dbg_9.50~dfsg-5ubuntu4.8_s390x.deb 87f72b86e73e07a95b4a5240170beca6 42904 text optional ghostscript-x_9.50~dfsg-5ubuntu4.8_s390x.deb 1cf7ae2657608d04c8387e45c054412a 12768 text optional ghostscript_9.50~dfsg-5ubuntu4.8_s390x.buildinfo 1c26f2005d7b7591891a1efcda620fe7 51772 text optional ghostscript_9.50~dfsg-5ubuntu4.8_s390x.deb d9fbb8a727c976a82db0c189a768077a 27372 libdevel optional libgs-dev_9.50~dfsg-5ubuntu4.8_s390x.deb f068005f478cb0162c636334a0b66e31 2014392 libs optional libgs9_9.50~dfsg-5ubuntu4.8_s390x.deb Original-Maintainer: Debian Printing Team