-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 09 May 2024 22:20:16 +0200 Source: ghostscript Binary: ghostscript ghostscript-dbgsym ghostscript-x libgs-dev libgs10 libgs10-dbgsym Architecture: amd64 Version: 10.0.0~dfsg-11+deb12u4 Distribution: bookworm-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Salvatore Bonaccorso Description: ghostscript - interpreter for the PostScript language and for PDF ghostscript-x - transitional package for ghostscript libgs-dev - interpreter for the PostScript language and for PDF - Development libgs10 - interpreter for the PostScript language and for PDF - Library Changes: ghostscript (10.0.0~dfsg-11+deb12u4) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * In SAFER (default) don't allow eexec seeds other than the Type 1 standard (CVE-2023-52722) * Uniprint device - prevent string configuration changes when SAFER (CVE-2024-29510) * Bug #707691 (CVE-2024-33869) * Bug 707691 part 2 (CVE-2024-33869) * Bug #707686 (CVE-2024-33870) * OPVP device - prevent unsafe parameter change with SAFER (CVE-2024-33871) Checksums-Sha1: 00fe081addb0ead5998de9d5d598a73a8207cd06 5876 ghostscript-dbgsym_10.0.0~dfsg-11+deb12u4_amd64.deb cb5381bd1baee8120d83f86ea6c318650a7fb3eb 27884 ghostscript-x_10.0.0~dfsg-11+deb12u4_amd64.deb bbea5f92deed93c72f011c4458b4f0a68ce54417 12035 ghostscript_10.0.0~dfsg-11+deb12u4_amd64-buildd.buildinfo 0f565b496c725126de2348f8dbb7f5504fd44e42 57060 ghostscript_10.0.0~dfsg-11+deb12u4_amd64.deb d5a73b96c4d7960d68be175ec201f0f5f7e95761 39420 libgs-dev_10.0.0~dfsg-11+deb12u4_amd64.deb 22b342890a4db92fa4ae25035ff7d0c4d9d6339d 9705340 libgs10-dbgsym_10.0.0~dfsg-11+deb12u4_amd64.deb 34f04dc1b282c6108c61abba3e6f416ba8eb7d25 2466516 libgs10_10.0.0~dfsg-11+deb12u4_amd64.deb Checksums-Sha256: d05eb12954ae945d7df9465fc2044254e3e8d08db0356d9747151063f62283ff 5876 ghostscript-dbgsym_10.0.0~dfsg-11+deb12u4_amd64.deb b0f293b768e90b59bf2db3bc6d12409c47bd5563de9f330561028a5770afce3b 27884 ghostscript-x_10.0.0~dfsg-11+deb12u4_amd64.deb 413485fda741ac64e3cbb8dc5d078e1acfe07b3d42fb5de3c9f228a6153de9f1 12035 ghostscript_10.0.0~dfsg-11+deb12u4_amd64-buildd.buildinfo ea6ffe668391dc5c34f1f60b8cea9326ab20c4e53545b3cf7f120906c48ba7b7 57060 ghostscript_10.0.0~dfsg-11+deb12u4_amd64.deb 61ea2cdfecd555a4c90c10b2066ad9bd0f5aacee19c775a8f8ce0356326b5d79 39420 libgs-dev_10.0.0~dfsg-11+deb12u4_amd64.deb c8999ba1c8cf598efd01205e33cdefa0923d8cb5f5a0fa832e7cc9f978b93c93 9705340 libgs10-dbgsym_10.0.0~dfsg-11+deb12u4_amd64.deb 20c1914f7642bc353455fc22d21b69d95a279082ac6cbb3bd3af82819fec1c78 2466516 libgs10_10.0.0~dfsg-11+deb12u4_amd64.deb Files: ed555f0466a6ac554e5ce7f9cba1b5d1 5876 debug optional ghostscript-dbgsym_10.0.0~dfsg-11+deb12u4_amd64.deb fef3d9220e55575ce4dd2784cc85c326 27884 oldlibs optional ghostscript-x_10.0.0~dfsg-11+deb12u4_amd64.deb 0e4038cf24c5558929bc1b1cd5fad52d 12035 text optional ghostscript_10.0.0~dfsg-11+deb12u4_amd64-buildd.buildinfo 388e9f59f656d08cc09d7235307bae81 57060 text optional ghostscript_10.0.0~dfsg-11+deb12u4_amd64.deb 553e70f84915733565eba2d5b439eadf 39420 libdevel optional libgs-dev_10.0.0~dfsg-11+deb12u4_amd64.deb 3e66571c1c0cf2e0d280667448b5ffff 9705340 debug optional libgs10-dbgsym_10.0.0~dfsg-11+deb12u4_amd64.deb 54576031608a49e5bae9e20e7cce58d8 2466516 libs optional libgs10_10.0.0~dfsg-11+deb12u4_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEvy6d65NNYPbL6IQIEQ1nooK/IAQFAmY+JNQACgkQEQ1nooK/ IARKvxAAiSurZHmHrHJLBOsVY4Q5VmYfUDyrxcM1WyvZUemfkcMEaNAHRIoanISg PiftoXm5fSA+/keUPHjP1hie1UNidfr3/JJ0yzQbYQn1EO4bIu8o5jAD/uhiJ7Vh t5armnvhL2HXdL4fus3aF1YPI2zGD0h8cfO3QcPrlxWJqeKsd2hq0Dbds0RWreER /9gikVG+TNQ9vcpkphMgjpSDkM/qGe0LbODdUzPvbmfLDRJNUmmw+LIw4jX+rWx7 NTW38l6N2693eUH/FmAwZON6lvBxCscgZNWRndAy4Tmk0ft4AYfycB7X10DdKsrE VtobZmAA5Z5HdNvh7jfNkMiIDyBJ7KKz0OLFCsKFC58F0z6XVqBm7QBXO3UEdulx eHGCgxLQaxWzzObp43OPagZ9g5Q+9I535aV/6il3k4CUfgUaUL6Bce2TOdwRQRok tff+e6vW/9h0z233yyW6ambZ5a6v6h2qklN5BTNdVQC4VMjpxSk4bkxSQHYBCwky riAyfIe64+RIS8k26NoQAaKDSV+wgQtRaG0jPDBd/hAVj3xnA7XQF1WbemzCxPZC Q/Fv74Gttjare60A9/8aKaUthu4yqw03lYZzKGkvEFJXs2fF/1WAVrmcaFwIU1I4 YaCVYXsrMQyyRP47YghLyIGAtdaxIfUp2DoFqiHI0KSj7LfhchY= =b5S1 -----END PGP SIGNATURE-----