ghostscript 8.71.dfsg.2-0ubuntu7.1 source package in Ubuntu

Changelog

ghostscript (8.71.dfsg.2-0ubuntu7.1) maverick-security; urgency=low

  * SECURITY UPDATE: integer overflows via integer multiplication for
    memory allocation
    - debian/patches/CVE-2008-352x.dpatch: introduce new size-checked
      allocation functions and use them in:
      * jasper/src/libjasper/base/{jas_cm.c,jas_icc.c,jas_image.c,
        jas_malloc.c,jas_seq.c}
      * jasper/src/libjasper/bmp/bmp_dec.c
      * jasper/src/libjasper/include/jasper/jas_malloc.h
      * jasper/src/libjasper/jp2/{jp2_cod.c,jp2_dec.c,jp2_enc.c}
      * jasper/src/libjasper/jpc/{jpc_cs.c,jpc_dec.c,jpc_enc.c,jpc_mqdec.c,
        jpc_mqenc.c,jpc_qmfb.c,jpc_t1enc.c,jpc_t2cod.c,jpc_t2dec.c,
        jpc_t2enc.c,jpc_tagtree.c,jpc_util.c}
      * jasper/src/libjasper/mif/mif_cod.c
    - CVE-2008-3520
  * SECURITY UPDATE: buffer overflow via vsprintf in jas_stream_printf()
    - debian/patches/CVE-2008-352x.dpatch: use vsnprintf() in
      jasper/src/libjasper/base/jas_stream.c
    - CVE-2008-3522
  * SECURITY UPDATE: denial of service and possible code execution via
    heap-based buffer overflows.
    - debian/patches/CVE-2011-451x.dpatch: validate compparms->numrlvls
      and allocate proper size in jasper/src/libjasper/jpc/jpc_cs.c.
    - CVE-2011-4516
    - CVE-2011-4517
 -- Marc Deslauriers <email address hidden>   Tue, 20 Dec 2011 14:09:50 -0500

Upload details

Uploaded by:
Marc Deslauriers on 2011-12-20
Uploaded to:
Maverick
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
text
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
ghostscript_8.71.dfsg.2.orig.tar.gz 22.6 MiB 458e1ae0ac2d7737a7175db67f2dc4e46e5a64b8b6dadba8febeeb842f7d3857
ghostscript_8.71.dfsg.2-0ubuntu7.1.diff.gz 78.9 KiB 991b2542fe0fdf78be08dad4407fd1f4f91e955553cab39c6350b8c031364cd0
ghostscript_8.71.dfsg.2-0ubuntu7.1.dsc 2.4 KiB 2a2377a2d8624417253409aea7359968744fede434d3455a8789a9615a272148

View changes file

Binary packages built by this source

ghostscript: No summary available for ghostscript in ubuntu maverick.

No description available for ghostscript in ubuntu maverick.

ghostscript-cups: No summary available for ghostscript-cups in ubuntu maverick.

No description available for ghostscript-cups in ubuntu maverick.

ghostscript-doc: No summary available for ghostscript-doc in ubuntu maverick.

No description available for ghostscript-doc in ubuntu maverick.

ghostscript-x: No summary available for ghostscript-x in ubuntu maverick.

No description available for ghostscript-x in ubuntu maverick.

gs: No summary available for gs in ubuntu maverick.

No description available for gs in ubuntu maverick.

gs-aladdin: No summary available for gs-aladdin in ubuntu maverick.

No description available for gs-aladdin in ubuntu maverick.

gs-common: No summary available for gs-common in ubuntu maverick.

No description available for gs-common in ubuntu maverick.

gs-esp: No summary available for gs-esp in ubuntu maverick.

No description available for gs-esp in ubuntu maverick.

gs-esp-x: No summary available for gs-esp-x in ubuntu maverick.

No description available for gs-esp-x in ubuntu maverick.

gs-gpl: No summary available for gs-gpl in ubuntu maverick.

No description available for gs-gpl in ubuntu maverick.

libgs-dev: No summary available for libgs-dev in ubuntu maverick.

No description available for libgs-dev in ubuntu maverick.

libgs-esp-dev: No summary available for libgs-esp-dev in ubuntu maverick.

No description available for libgs-esp-dev in ubuntu maverick.

libgs8: No summary available for libgs8 in ubuntu maverick.

No description available for libgs8 in ubuntu maverick.