-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 10 May 2024 14:34:11 +0200 Source: ghostscript Binary: ghostscript ghostscript-dbgsym ghostscript-x ghostscript-x-dbgsym libgs-dev libgs9 libgs9-dbgsym Architecture: i386 Version: 9.53.3~dfsg-7+deb11u7 Distribution: bullseye-security Urgency: high Maintainer: i386 Build Daemon (x86-grnet-01) Changed-By: Salvatore Bonaccorso Description: ghostscript - interpreter for the PostScript language and for PDF ghostscript-x - interpreter for the PostScript language and for PDF - X11 support libgs-dev - interpreter for the PostScript language and for PDF - Development libgs9 - interpreter for the PostScript language and for PDF - Library Changes: ghostscript (9.53.3~dfsg-7+deb11u7) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * In SAFER (default) don't allow eexec seeds other than the Type 1 standard (CVE-2023-52722) * Uniprint device - prevent string configuration changes when SAFER (CVE-2024-29510) * Bug #707691 (CVE-2024-33869) * Bug 707691 part 2 (CVE-2024-33869) * Bug #707686 (CVE-2024-33870) * OPVP device - prevent unsafe parameter change with SAFER (CVE-2024-33871) Checksums-Sha1: 86448e095f3d705b3fa0ea99b4ebcb9a77ee2fe3 5452 ghostscript-dbgsym_9.53.3~dfsg-7+deb11u7_i386.deb fb77d9c939a57a106a55ae7189bbd457d3345e95 93812 ghostscript-x-dbgsym_9.53.3~dfsg-7+deb11u7_i386.deb 1e2cb4a20cbf0e1da8d36c7cf4972b03b3b6edda 96132 ghostscript-x_9.53.3~dfsg-7+deb11u7_i386.deb 1c4f9df73a6719a46e7901f0ba3fa43d6b014e18 11643 ghostscript_9.53.3~dfsg-7+deb11u7_i386-buildd.buildinfo b20087026adeae75a0e6ac2f3c6318c957beb887 98588 ghostscript_9.53.3~dfsg-7+deb11u7_i386.deb c0cd97f79b7637dd6a94a83c8b1de85a5a8faf78 80444 libgs-dev_9.53.3~dfsg-7+deb11u7_i386.deb 06102f133165517305f1d25b4e80f21d8abaaa93 7022296 libgs9-dbgsym_9.53.3~dfsg-7+deb11u7_i386.deb 6344bcc109bd2f18be4c0c45f3077eaed30d2e41 2366488 libgs9_9.53.3~dfsg-7+deb11u7_i386.deb Checksums-Sha256: 0d24e8ca5af55930542f0e508247fcc07cf673a3596cb241f5d5a53bf604391a 5452 ghostscript-dbgsym_9.53.3~dfsg-7+deb11u7_i386.deb c86702550165fd828232590d6c934be567f6ad20d11700554180aa61cc7bfc67 93812 ghostscript-x-dbgsym_9.53.3~dfsg-7+deb11u7_i386.deb f3b6d61b047bd225114122bff1d2f6f17c1fe7a8efe449e0e05a18d3a3e8d029 96132 ghostscript-x_9.53.3~dfsg-7+deb11u7_i386.deb cb113ce973e6289c79e509c6054e33a5a978cf8acc2a6b34f2760087f43caf99 11643 ghostscript_9.53.3~dfsg-7+deb11u7_i386-buildd.buildinfo 30d08004d110f1f0697dbbf79df34ac4cdeaddc86b94ee83625d982b273f3bd7 98588 ghostscript_9.53.3~dfsg-7+deb11u7_i386.deb 34fe0a69c02dd32ca0979a6a41469e992bccab5ebf6706fad1d8d56902c726be 80444 libgs-dev_9.53.3~dfsg-7+deb11u7_i386.deb 0bd88fb5025848727c1484da3fbea110a6bbbeafc110046b6efeb8bed1c3df6d 7022296 libgs9-dbgsym_9.53.3~dfsg-7+deb11u7_i386.deb 7d5aadaf3ba57eeba0652e0f1b90a9495a541b536afacc20f7d997333efe6119 2366488 libgs9_9.53.3~dfsg-7+deb11u7_i386.deb Files: 6457389f5426ca87bea0cc5cb04bd83c 5452 debug optional ghostscript-dbgsym_9.53.3~dfsg-7+deb11u7_i386.deb fb811f8e640122ec0b45cd2b5e7a9b69 93812 debug optional ghostscript-x-dbgsym_9.53.3~dfsg-7+deb11u7_i386.deb aa6a3e64c54bf474a18c333411d0e667 96132 text optional ghostscript-x_9.53.3~dfsg-7+deb11u7_i386.deb bf2f0bc371bfa16910d86a670f3277d4 11643 text optional ghostscript_9.53.3~dfsg-7+deb11u7_i386-buildd.buildinfo fb7e615b3a3f861c8bca817558eadfdc 98588 text optional ghostscript_9.53.3~dfsg-7+deb11u7_i386.deb 2c287b1af32999897a9a2a63082a89a8 80444 libdevel optional libgs-dev_9.53.3~dfsg-7+deb11u7_i386.deb 7d75e25f0b3b629e33f092e1307ebeef 7022296 debug optional libgs9-dbgsym_9.53.3~dfsg-7+deb11u7_i386.deb e8426f81abd9556e83ee7d150c8f89a6 2366488 libs optional libgs9_9.53.3~dfsg-7+deb11u7_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEyTfXx8sBpQ0Lh3cUU9a0/LcaTpMFAmY+XIMACgkQU9a0/Lca TpMr1hAAkcFdtv6PqFxFHpGY0g4QmIxQX8C64xKX2vOJILh30WVHjZTGB5sRXV9L dEGfTo7xvaYSI63AkgdqHO1ArB+DVcmBkevn0h0I4QC3Ro1tAcPFKQDLsT5IaFgo KFk2pxbRLHYGQDKd9Wj6qMNVlF7fofS11lYWWxrV679cczXQIeWsYliR3s3HfxuS Qyf1MjMw6gJXAb8rc6tygrV/wrHBew7RiEEhCyEIg/2XBu6sLs7q3JHeO65bIMA2 DRKKNjWXToIMjga4YcEcdogJpzW4OWjhzkgOLOVjBA3QX42UbiTqjTYpK6maqMEr coLK5tkSHsPRiP5scKk5msfAv7/rOepTOrlMyEhZcele1MpfVc4tGCRxi1JZ0OAz McIvwO2iygno9PyoONYfYxjJPXH229y8HxM1ame2typoGTQpsJDo4J36AVqHSebw ZYnqaEbn1fHQfqvXvIjzhiOnEfu98rdFQtpVHT2dS8lvr2UfEebJuirROAy3BI/d zMO+uOm+rzsZCScH5fLS2TKkIjsyfzLZL19vqEypZ8QKG1WOlXSh2PpL2iR1hsSw d3s4IQKGwXKo8VFDeMiyhJPSg4lA8I7fFd3Zq3qXiHUHKwsGQqrkBPjU7c/O1M4O neP1XvhOscAnjyuV28715jZVbcKEKv/cfTda3tkI937nvYHTimA= =k+HH -----END PGP SIGNATURE-----