Format: 1.8 Date: Thu, 01 Dec 2016 08:57:08 -0600 Source: ghostscript Binary: ghostscript ghostscript-x ghostscript-doc libgs9 libgs9-common libgs-dev ghostscript-dbg Architecture: powerpc Version: 9.19~dfsg+1-0ubuntu6.2 Distribution: yakkety Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Emily Ratliff Description: ghostscript - interpreter for the PostScript language and for PDF ghostscript-dbg - interpreter for the PostScript language and for PDF - Debug symbo ghostscript-doc - interpreter for the PostScript language and for PDF - Documentati ghostscript-x - interpreter for the PostScript language and for PDF - X11 support libgs-dev - interpreter for the PostScript language and for PDF - Development libgs9 - interpreter for the PostScript language and for PDF - Library libgs9-common - interpreter for the PostScript language and for PDF - common file Changes: ghostscript (9.19~dfsg+1-0ubuntu6.2) yakkety-security; urgency=medium . * SECURITY UPDATE: Information disclosure through getenv, filenameforall - debian/patches/CVE-2013-5653.patch: Have filenameforall and getenv honor SAFER - CVE-2013-5653 * SECURITY UPDATE: userparams with %pipe% in paths allow remote shell exec - debian/patches/CVE-2016-7976.patch: Add a file permissions callback - CVE-2016-7976 * SECURITY UPDATE: use-after-free and remote code execution - debian/patches/CVE-2016-7978.patch: Reference count device icc profile - CVE-2016-7978 * SECURITY UPDATE: type confusion allows remote code execution - debian/patches/CVE-2016-7979.patch: DSC parser - validate parameters - CVE-2016-7979 * SECURITY UPDATE: NULL dereference - debian/patches/CVE-2016-8602.patch: check for sufficient params - CVE-2016-8602 * SECURITY UPDATE: fix SAFER permissions - debian/patches/CVE-2016-7977.patch: Be rigorous with SAFER permissions - CVE-2016-7977 Checksums-Sha1: 679363257486b8d831ba45e9f5aa2f74bc01ee62 12050070 ghostscript-dbg_9.19~dfsg+1-0ubuntu6.2_powerpc.deb 498b8fa9c0f803dd35fe08a59f8898288df503c5 1004 ghostscript-dbgsym_9.19~dfsg+1-0ubuntu6.2_powerpc.ddeb 5bac75370f6f4817b444984f6e4463c9a2e25aa5 936 ghostscript-x-dbgsym_9.19~dfsg+1-0ubuntu6.2_powerpc.ddeb f3d2df56626f89e7f5789dfb2e551a4b8af555ec 41922 ghostscript-x_9.19~dfsg+1-0ubuntu6.2_powerpc.deb aec3db0e5eb4be35bfce4156c2c781138fc590f7 50070 ghostscript_9.19~dfsg+1-0ubuntu6.2_powerpc.deb f4e3f81f21f5c5f1cb0ae62cd74e8088ed76b751 996 libgs-dev-dbgsym_9.19~dfsg+1-0ubuntu6.2_powerpc.ddeb 09c708c7c8b1f3de041d53e4f6ea6de85f63f9e9 2102292 libgs-dev_9.19~dfsg+1-0ubuntu6.2_powerpc.deb 5c27274dac9ca4d0b4c07891e979942c7342736a 978 libgs9-dbgsym_9.19~dfsg+1-0ubuntu6.2_powerpc.ddeb 0ca34d0bb0a8fbe3e5682a3936946ee5042aee68 1827910 libgs9_9.19~dfsg+1-0ubuntu6.2_powerpc.deb Checksums-Sha256: 06a2143a410128a721c9ec887e4927179b63eab6fe80c52ab0a176c6c4fd9cf1 12050070 ghostscript-dbg_9.19~dfsg+1-0ubuntu6.2_powerpc.deb 1edb8348d4470483b9d422b5ee62d9302453f91fe78ab312cc3d918223589bd0 1004 ghostscript-dbgsym_9.19~dfsg+1-0ubuntu6.2_powerpc.ddeb 9e69ce1b346f6a7b0f8c65708f5646aee2386030e06bd17cef3c1388398f8e25 936 ghostscript-x-dbgsym_9.19~dfsg+1-0ubuntu6.2_powerpc.ddeb b850d89c8002a496497063ec2f57b5bd44248b09840346a804a9f288a4d77cf6 41922 ghostscript-x_9.19~dfsg+1-0ubuntu6.2_powerpc.deb 4088cab0ed0be432a1873202c16a23d6983e3004aa848321de3f82bf56eb15b3 50070 ghostscript_9.19~dfsg+1-0ubuntu6.2_powerpc.deb 192bc08abe0b751adb4362e36b7511e4a2a86814fc4e22a6afe7697c85e5047a 996 libgs-dev-dbgsym_9.19~dfsg+1-0ubuntu6.2_powerpc.ddeb 22070ca19cd34350b7a2f0fa0f841eed4440135a72131b281a1bedf02f7b7f84 2102292 libgs-dev_9.19~dfsg+1-0ubuntu6.2_powerpc.deb 5a4d063988bed045451eec8c931e51de72b39f5f9214e60abc98bcf1cdc5476b 978 libgs9-dbgsym_9.19~dfsg+1-0ubuntu6.2_powerpc.ddeb 5c45bc664a5a4f2a1e4549132c98bb2a2723629ee9fd0104fa95f7166132e29a 1827910 libgs9_9.19~dfsg+1-0ubuntu6.2_powerpc.deb Files: d7651f42ffe7df4f843da9e303644756 12050070 debug extra ghostscript-dbg_9.19~dfsg+1-0ubuntu6.2_powerpc.deb f12384e05c94c2643b9f68883ecdfc96 1004 text extra ghostscript-dbgsym_9.19~dfsg+1-0ubuntu6.2_powerpc.ddeb 03a64182c4c37b5951b0a67a27f99c20 936 text extra ghostscript-x-dbgsym_9.19~dfsg+1-0ubuntu6.2_powerpc.ddeb 830a51c2ce01abf934182b218fd29b4c 41922 text optional ghostscript-x_9.19~dfsg+1-0ubuntu6.2_powerpc.deb 8d35ac5a8012ddddde0885f26c7e4167 50070 text optional ghostscript_9.19~dfsg+1-0ubuntu6.2_powerpc.deb b46322d24c56a5b9982a3c976ddc017f 996 libdevel extra libgs-dev-dbgsym_9.19~dfsg+1-0ubuntu6.2_powerpc.ddeb 45a4a7491433b57638f8f3324be9e8c1 2102292 libdevel optional libgs-dev_9.19~dfsg+1-0ubuntu6.2_powerpc.deb a6e602dcbd9ffd36a2c0f5de7e0a3f91 978 libs extra libgs9-dbgsym_9.19~dfsg+1-0ubuntu6.2_powerpc.ddeb 0f1db774933c405a00473265aa3be2dc 1827910 libs optional libgs9_9.19~dfsg+1-0ubuntu6.2_powerpc.deb Original-Maintainer: Debian Printing Team