Format: 1.8 Date: Tue, 19 Mar 2019 09:03:50 -0400 Source: ghostscript Binary: ghostscript ghostscript-x ghostscript-doc libgs9 libgs9-common libgs-dev ghostscript-dbg Architecture: powerpc Version: 9.26~dfsg+0-0ubuntu0.16.04.8 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: ghostscript - interpreter for the PostScript language and for PDF ghostscript-dbg - interpreter for the PostScript language and for PDF - Debug symbo ghostscript-doc - interpreter for the PostScript language and for PDF - Documentati ghostscript-x - interpreter for the PostScript language and for PDF - X11 support libgs-dev - interpreter for the PostScript language and for PDF - Development libgs9 - interpreter for the PostScript language and for PDF - Library libgs9-common - interpreter for the PostScript language and for PDF - common file Changes: ghostscript (9.26~dfsg+0-0ubuntu0.16.04.8) xenial-security; urgency=medium . * SECURITY UPDATE: superexec operator is available - debian/patches/CVE-2019-3835-pre1.patch: Have gs_cet.ps run from gs_init.ps in Resource/Init/gs_cet.ps, Resource/Init/gs_init.ps. - debian/patches/CVE-2019-3835-pre2.patch: Undef /odef in Resource/Init/gs_cet.ps, Resource/Init/gs_init.ps. - debian/patches/CVE-2019-3835-1.patch: restrict superexec and remove it in Resource/Init/gs_cet.ps, Resource/Init/gs_dps1.ps, Resource/Init/gs_fonts.ps, Resource/Init/gs_init.ps, Resource/Init/gs_ttf.ps, Resource/Init/gs_type1.ps. - debian/patches/CVE-2019-3835-2.patch: obliterate superexec in Resource/Init/gs_init.ps, psi/icontext.c, psi/icstate.h, psi/zcontrol.c, psi/zdict.c, psi/zgeneric.c. - CVE-2019-3835 * SECURITY UPDATE: forceput in DefineResource is still accessible - debian/patches/CVE-2019-3838-1.patch: make a transient proc executeonly in Resource/Init/gs_res.ps. - debian/patches/CVE-2019-3838-2.patch: an extra transient proc needs executeonly in Resource/Init/gs_res.ps. - CVE-2019-3838 Checksums-Sha1: eec3899fb3b848d9e0e9019ac4e6acfa348c3e8e 5906748 ghostscript-dbg_9.26~dfsg+0-0ubuntu0.16.04.8_powerpc.deb 931c4fc1d4acedfbf67611819233fba01ba2e252 1010 ghostscript-dbgsym_9.26~dfsg+0-0ubuntu0.16.04.8_powerpc.ddeb b687863daf30bbf2eceb671f89b4502ceb5211e2 942 ghostscript-x-dbgsym_9.26~dfsg+0-0ubuntu0.16.04.8_powerpc.ddeb 3310c0d091063db416f991fa006df3f3f2528644 41616 ghostscript-x_9.26~dfsg+0-0ubuntu0.16.04.8_powerpc.deb 9eebd28d6f5d2129b9839d15f71c4158af1f60da 47026 ghostscript_9.26~dfsg+0-0ubuntu0.16.04.8_powerpc.deb e90f0a3f8af4260c53345d6d2e8c804628a0c3e9 1006 libgs-dev-dbgsym_9.26~dfsg+0-0ubuntu0.16.04.8_powerpc.ddeb 3e5bb7e886c551aae5b0aba87dab8be7dfb02c4a 25446 libgs-dev_9.26~dfsg+0-0ubuntu0.16.04.8_powerpc.deb a42611cc5c99fafc74a709c0eda4df107aa4e401 986 libgs9-dbgsym_9.26~dfsg+0-0ubuntu0.16.04.8_powerpc.ddeb 66c26810cbfa9652036298176a69523d68d477b5 1980252 libgs9_9.26~dfsg+0-0ubuntu0.16.04.8_powerpc.deb Checksums-Sha256: a998091381955a312ab4dc45ecb7026e02426e799cd379081b73057c74ed0c5f 5906748 ghostscript-dbg_9.26~dfsg+0-0ubuntu0.16.04.8_powerpc.deb 0b1322cc9a1c868a79876f34398367749a69235dc1d6d8f2a8799ce305ef259e 1010 ghostscript-dbgsym_9.26~dfsg+0-0ubuntu0.16.04.8_powerpc.ddeb 266b43af763f4001e460c5bf1c8eab3b984ce0f6727569797d057bf2d6cdb14f 942 ghostscript-x-dbgsym_9.26~dfsg+0-0ubuntu0.16.04.8_powerpc.ddeb ea68c2114dd482d8d9618f90352aea460e8f3977848814e0bb44b98e72948014 41616 ghostscript-x_9.26~dfsg+0-0ubuntu0.16.04.8_powerpc.deb b77d797328dba3d6c2363145a96e6983d83a47c876a54fb18285e89743445373 47026 ghostscript_9.26~dfsg+0-0ubuntu0.16.04.8_powerpc.deb 31e897af1a2e67f30444ed293fc55c6610ad1b4f99e8ee178f386ee5fcc48ec6 1006 libgs-dev-dbgsym_9.26~dfsg+0-0ubuntu0.16.04.8_powerpc.ddeb d0a0f751d28ef8716a0c1425d60860bfe04a6df156758ce3fee230bb29fcf3df 25446 libgs-dev_9.26~dfsg+0-0ubuntu0.16.04.8_powerpc.deb 1527d7a941c81946230fb9e545798c2d7e685b54e8378f1d98df7c6c8f91d32c 986 libgs9-dbgsym_9.26~dfsg+0-0ubuntu0.16.04.8_powerpc.ddeb 9a4c6ed333d54cbe27c3a75ecba137d8f5e807f8d5eccc409c2485ebd547c543 1980252 libgs9_9.26~dfsg+0-0ubuntu0.16.04.8_powerpc.deb Files: 7c1e210d9dbe4697736cbc77426572be 5906748 debug extra ghostscript-dbg_9.26~dfsg+0-0ubuntu0.16.04.8_powerpc.deb 07efb59b2001d1f54bad2ba0c239d4fa 1010 text extra ghostscript-dbgsym_9.26~dfsg+0-0ubuntu0.16.04.8_powerpc.ddeb 86c7d0e02b50bd64b01553dbbbf665aa 942 text extra ghostscript-x-dbgsym_9.26~dfsg+0-0ubuntu0.16.04.8_powerpc.ddeb 851f337f2477db3ec33ec1e4fb2a5bdf 41616 text optional ghostscript-x_9.26~dfsg+0-0ubuntu0.16.04.8_powerpc.deb 314b7544bbf498ece1a943e03c6288fd 47026 text optional ghostscript_9.26~dfsg+0-0ubuntu0.16.04.8_powerpc.deb 9e901ce255731d1341f722f80fd5dcc6 1006 libdevel extra libgs-dev-dbgsym_9.26~dfsg+0-0ubuntu0.16.04.8_powerpc.ddeb 783e8089838121602e622edc7c62769c 25446 libdevel optional libgs-dev_9.26~dfsg+0-0ubuntu0.16.04.8_powerpc.deb 827ebb55c716db9567b08e5df55d764b 986 libs extra libgs9-dbgsym_9.26~dfsg+0-0ubuntu0.16.04.8_powerpc.ddeb b34821a7dc6f2c96f6d0dda6d51ed7bc 1980252 libs optional libgs9_9.26~dfsg+0-0ubuntu0.16.04.8_powerpc.deb Original-Maintainer: Debian Printing Team