-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 10 May 2024 14:34:11 +0200 Source: ghostscript Binary: ghostscript ghostscript-dbgsym ghostscript-x ghostscript-x-dbgsym libgs-dev libgs9 libgs9-dbgsym Architecture: s390x Version: 9.53.3~dfsg-7+deb11u7 Distribution: bullseye-security Urgency: high Maintainer: s390x Build Daemon (zandonai) Changed-By: Salvatore Bonaccorso Description: ghostscript - interpreter for the PostScript language and for PDF ghostscript-x - interpreter for the PostScript language and for PDF - X11 support libgs-dev - interpreter for the PostScript language and for PDF - Development libgs9 - interpreter for the PostScript language and for PDF - Library Changes: ghostscript (9.53.3~dfsg-7+deb11u7) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * In SAFER (default) don't allow eexec seeds other than the Type 1 standard (CVE-2023-52722) * Uniprint device - prevent string configuration changes when SAFER (CVE-2024-29510) * Bug #707691 (CVE-2024-33869) * Bug 707691 part 2 (CVE-2024-33869) * Bug #707686 (CVE-2024-33870) * OPVP device - prevent unsafe parameter change with SAFER (CVE-2024-33871) Checksums-Sha1: b6a49cd9932a471a11ba623ce20aa29cb00fc3c1 5676 ghostscript-dbgsym_9.53.3~dfsg-7+deb11u7_s390x.deb 757e7282be045ceaaddca064514b65a25384b3ec 101196 ghostscript-x-dbgsym_9.53.3~dfsg-7+deb11u7_s390x.deb e70dc93429d661971ed233deea786bed4b2b4308 93308 ghostscript-x_9.53.3~dfsg-7+deb11u7_s390x.deb e9ebca08258a49b0c3ba6a3f283f89410912e03f 11569 ghostscript_9.53.3~dfsg-7+deb11u7_s390x-buildd.buildinfo ba5e83b7f41ef835350aab5e4a5a094a3f65c188 98384 ghostscript_9.53.3~dfsg-7+deb11u7_s390x.deb d7ed3141cd933359acb5a10e7355371eb5069c61 80440 libgs-dev_9.53.3~dfsg-7+deb11u7_s390x.deb b4fdbd8bac722bea2d78d805d03cac0f24e6726a 7995744 libgs9-dbgsym_9.53.3~dfsg-7+deb11u7_s390x.deb fa77d3ae86489899143df59319f241b30792d038 2091004 libgs9_9.53.3~dfsg-7+deb11u7_s390x.deb Checksums-Sha256: 918444b1f2546c18820c8740fc08b0c491fb7152dff33f4078f2a6c363aaf7bc 5676 ghostscript-dbgsym_9.53.3~dfsg-7+deb11u7_s390x.deb 25f40a7dc53c6622cb3c662159826c3267082e311eee59f6e7cb5b1a995f4dc2 101196 ghostscript-x-dbgsym_9.53.3~dfsg-7+deb11u7_s390x.deb 0c4c057188dc1230f258aee6c64ad88d5818786bb04f3b0a94c2d1b3f10999c9 93308 ghostscript-x_9.53.3~dfsg-7+deb11u7_s390x.deb 48655f459bcfb827c917d785d633558ce3773f26183e6193237af759fa65ee95 11569 ghostscript_9.53.3~dfsg-7+deb11u7_s390x-buildd.buildinfo 6c248cca5be7ec7327285edfdf7352d9c30c1eda865b1859ec367a61c9ca890b 98384 ghostscript_9.53.3~dfsg-7+deb11u7_s390x.deb 0e1d24324fd7532435f44ed8b3a2c18edc9bcf76d4891009558425d423d75a3f 80440 libgs-dev_9.53.3~dfsg-7+deb11u7_s390x.deb 407ab22394d95175339ef3adf05e505bf5792a09469391884a62606f2999e825 7995744 libgs9-dbgsym_9.53.3~dfsg-7+deb11u7_s390x.deb 61b57e45dc2ff288ba8e5b93cea4f8997decc23f8614fdfac608d0040a28d516 2091004 libgs9_9.53.3~dfsg-7+deb11u7_s390x.deb Files: 1299d42b91037e76d3e73b9b30d4d336 5676 debug optional ghostscript-dbgsym_9.53.3~dfsg-7+deb11u7_s390x.deb 5d6ef7ae35f46c5b4232724a6dc3f331 101196 debug optional ghostscript-x-dbgsym_9.53.3~dfsg-7+deb11u7_s390x.deb 8b872845a9b449c1137a1cf5f6fcabf7 93308 text optional ghostscript-x_9.53.3~dfsg-7+deb11u7_s390x.deb 84a5b25cb6b3d1ba4099c859e26d2dee 11569 text optional ghostscript_9.53.3~dfsg-7+deb11u7_s390x-buildd.buildinfo 658ac41aad097fbe1f78a2c2460b110b 98384 text optional ghostscript_9.53.3~dfsg-7+deb11u7_s390x.deb 665b457d17cb209acc941b58915b3e24 80440 libdevel optional libgs-dev_9.53.3~dfsg-7+deb11u7_s390x.deb eee434a8b670a7af5f210100d450c7ef 7995744 debug optional libgs9-dbgsym_9.53.3~dfsg-7+deb11u7_s390x.deb 443ad0a3b116d0afa9afad0476d9645e 2091004 libs optional libgs9_9.53.3~dfsg-7+deb11u7_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEctqRAwcjFMIrbct74euoNlQ3ywQFAmY+XuQACgkQ4euoNlQ3 ywRx7Q//WCiW9OeHrKx5+3/e6kfnaZQRud5fOml/96NmXbqE6V8C+8egmZazwOc+ 1kdoZ0wkY/9M6ZgZUkGIor1OLjoAG0UtLfGST1ZywN1m42Mglv2plA9xEH7LcYWM gEnRlvVkbWh0Itg2UNFTICNbgRkvO/pD7RKHviwooe1LaQ45sk+fiTGyCWZnhdKV zbuxR8j8W7n20kneoNb6baN2ANxNMDZhsr+ImWJCnGQN/nONpP5dq+W2totVhP9O 0B41xN20KJLP1IdcXe6DWIxVo8CAojqrsykcWNHKtqCdu/9ykofmsyrbCKy0/K3T 3FlOSHD7pjp7i1I6Dl/pWRmJoIhF0y6AUpjfVEBBgiud2QDFMqE667PT8SjZLe2I VoVuid9I9AlYVgU51VDIckmBXcYMb+I8q7rHMy4BdxHyNj8YZ8Ebv1QLs4NfeQdQ Yx42XD005lqp521VQEpr5IgA9MqNKDLRi86GmhQ4CFifF1Krmbdt7bvPVJIC7afV 6F/laGXLyzqf1nhhAYN+3TdoGzd/ktMA+iQkydWBKq9ezK8sUBveyReAI6frpj41 aPP6lH3ooSsAEjdaV2FJ6smvnCdBJgwrY1t3G4AgoexvxbwxNfG+20V4FIcBDO7S k7lL8ngYrM+UUDkluxtiwnA7MsEguzEFlxnIpIwAcnUxyukcDcA= =FOKw -----END PGP SIGNATURE-----