-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 10 May 2024 14:34:11 +0200 Source: ghostscript Binary: ghostscript ghostscript-dbgsym ghostscript-x ghostscript-x-dbgsym libgs-dev libgs9 libgs9-dbgsym Architecture: ppc64el Version: 9.53.3~dfsg-7+deb11u7 Distribution: bullseye-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-conova-02) Changed-By: Salvatore Bonaccorso Description: ghostscript - interpreter for the PostScript language and for PDF ghostscript-x - interpreter for the PostScript language and for PDF - X11 support libgs-dev - interpreter for the PostScript language and for PDF - Development libgs9 - interpreter for the PostScript language and for PDF - Library Changes: ghostscript (9.53.3~dfsg-7+deb11u7) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * In SAFER (default) don't allow eexec seeds other than the Type 1 standard (CVE-2023-52722) * Uniprint device - prevent string configuration changes when SAFER (CVE-2024-29510) * Bug #707691 (CVE-2024-33869) * Bug 707691 part 2 (CVE-2024-33869) * Bug #707686 (CVE-2024-33870) * OPVP device - prevent unsafe parameter change with SAFER (CVE-2024-33871) Checksums-Sha1: 483c90ee24ddf3d0f697573d68d08deb98e4f551 5860 ghostscript-dbgsym_9.53.3~dfsg-7+deb11u7_ppc64el.deb d1d09640c26d8e11ba4d46e9e707c9a214a4ca8e 102264 ghostscript-x-dbgsym_9.53.3~dfsg-7+deb11u7_ppc64el.deb 6323225525a82be2af895f42b3f52526f8047346 97004 ghostscript-x_9.53.3~dfsg-7+deb11u7_ppc64el.deb 96e06363c3a6dd9b844a63c7153dda4a04dff896 11697 ghostscript_9.53.3~dfsg-7+deb11u7_ppc64el-buildd.buildinfo 96e07a7e71decea2ea57bf2b42457138f1103929 98644 ghostscript_9.53.3~dfsg-7+deb11u7_ppc64el.deb dc4201e4c21b869f967152a53d1d67044acdf123 80444 libgs-dev_9.53.3~dfsg-7+deb11u7_ppc64el.deb 129f9b66956aa7d993c9596c8646b2f045895666 7988692 libgs9-dbgsym_9.53.3~dfsg-7+deb11u7_ppc64el.deb cf86e3c6916f1a53a8be25285aef8916a13deb02 2399108 libgs9_9.53.3~dfsg-7+deb11u7_ppc64el.deb Checksums-Sha256: 4efec4e894fd0925c60ce76d5a144ac375bcd4deef0809f196869a9855dedc12 5860 ghostscript-dbgsym_9.53.3~dfsg-7+deb11u7_ppc64el.deb 0dfcb29050e39b8e83d38acc757f60bdf5420562ca824ef058c61de64fa4fa3f 102264 ghostscript-x-dbgsym_9.53.3~dfsg-7+deb11u7_ppc64el.deb a62958d6d9cb73dbcda89598151c012c46a6915e7a869c4dbb2946131aed2429 97004 ghostscript-x_9.53.3~dfsg-7+deb11u7_ppc64el.deb 5ad73c91e77cd7430026474c2397e4097e9729c7c2446a44a42d514dea3ec1f1 11697 ghostscript_9.53.3~dfsg-7+deb11u7_ppc64el-buildd.buildinfo b082b672af960944e0ae2cccf532c0914ef69a8c68dc0ddafd8e83c43dec4424 98644 ghostscript_9.53.3~dfsg-7+deb11u7_ppc64el.deb 711d1f207bd90946d32746b81986a5505538d9a699248421b4090265dcce3393 80444 libgs-dev_9.53.3~dfsg-7+deb11u7_ppc64el.deb a3cc90979ed372a4d1585a5506f0dd0b7e0f4f7b1550f040f231cd7b9def601a 7988692 libgs9-dbgsym_9.53.3~dfsg-7+deb11u7_ppc64el.deb 4c2904085dced8df1c667be6710689e6cf3d677a289750760b3783f49b140722 2399108 libgs9_9.53.3~dfsg-7+deb11u7_ppc64el.deb Files: ad89abc24cff3ecc3b5f4a595282e578 5860 debug optional ghostscript-dbgsym_9.53.3~dfsg-7+deb11u7_ppc64el.deb 6f702937e2fa38f57b70d470088c1064 102264 debug optional ghostscript-x-dbgsym_9.53.3~dfsg-7+deb11u7_ppc64el.deb a097a8a377c76949faae71bc64934800 97004 text optional ghostscript-x_9.53.3~dfsg-7+deb11u7_ppc64el.deb 9bbc246971034fd1d3b7cd032a405434 11697 text optional ghostscript_9.53.3~dfsg-7+deb11u7_ppc64el-buildd.buildinfo 0ae84ed9d142aace19f59d5f571f6d13 98644 text optional ghostscript_9.53.3~dfsg-7+deb11u7_ppc64el.deb 1cf0a416d3ba66e272458b8632a27532 80444 libdevel optional libgs-dev_9.53.3~dfsg-7+deb11u7_ppc64el.deb 43330e61b73dcfa53288de9470fb0c4a 7988692 debug optional libgs9-dbgsym_9.53.3~dfsg-7+deb11u7_ppc64el.deb fed40996b4bacbe6545d50d2cdaff78a 2399108 libs optional libgs9_9.53.3~dfsg-7+deb11u7_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEmyxOicioak1AZZAyyPVDLEOGa2QFAmY+W+EACgkQyPVDLEOG a2RB3A/+MkJhIUryYMZ8lxTOakZAqPE1suSSUYCNR5QrDlXdP2Xgp/DVcPxVBMst 00/f48uHvUkeCY8SzT24YKFtUkLLYDBaEeRoWPX5QtpZ1kYXECMwlVscwu5UqiC3 1wNNeViu9lsSM/R+VgjWDKJ+vZYVmifFYbNJZ6wmrAYClKnI7sRy3ogeqCriABgk 8E1nm20Jd+ltX0R4i1/nyrdhJJdbcwCLHn9VVua4T2qgPs1UCphSzhLRttB9fBYd PNfTF1r3QJP9leCdw1+zSK2NcLT6IMWzCrDXzlx2a4Gcqk5hb9Z2w0jyCYWJq2wO 2zOJha9KbG6Jo0dgqsTnfs/S3cTz4gEEejYeOcTdcD8BvcWzwPIoXVLPxTHCcsmb 0TRSuZYmj04/pj505r5/8E1VtPiGwNvlrYl093FitFjY8XucUMdbdMJQyJHnXlyv Cej3Bggo8FPpOrHgUuP2XxyueftGt6UcehiUnNH0swcuGmFcf8msAPtJPH5Xee6/ 9Ggm6hBl2rJXPXs11CugnJRoVLQ8/K6yfBX2OH8Ryg/ZrwN80JELmU0aPVJ5QdU2 nZrxSeg3EVJtH+Qp0TZT5X0dqwo/78iFZ4eLlyjyzDqLKvR+WVhsjvi3Ym4vJOXD AQtPRb1YaEMC6AVgRsgPrNU5t8Q5kW3+q/ocdl3AazD9kWTmYfM= =yBXT -----END PGP SIGNATURE-----