Thank you for your contribution to Debian.
Accepted:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 02 Jul 2023 10:50:27 +0200
Source: ghostscript
Architecture: source
Version: 10.0.0~dfsg-11+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: Debian QA Group <packa...@qa.debian.org>
Changed-By: Salvatore Bonaccorso <car...@debian.org>
Changes:
ghostscript (10.0.0~dfsg-11+deb12u1) bookworm-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* Don't "reduce" %pipe% file names for permission validation
(CVE-2023-36664)
* Revisit fix for upstream bug 706761 (CVE-2023-36664)
Checksums-Sha1:
e5049b6c95850be01c086ae0a434a5fb7e625a32 3019
ghostscript_10.0.0~dfsg-11+deb12u1.dsc
7aa37250cc830f3c9914b083ef468cfe30e6a00f 26688456
ghostscript_10.0.0~dfsg.orig.tar.xz
9ec57c8615d07870946686c25fe3acf79fc54747 86840
ghostscript_10.0.0~dfsg-11+deb12u1.debian.tar.xz
5494833599b1698e614b07cd7ff2a78342c9e97c 7241
ghostscript_10.0.0~dfsg-11+deb12u1_source.buildinfo
Checksums-Sha256:
fb2553f22cb746028b7b695fca5fd165df945cbc71fccbd9550975fbf83b9d5f 3019
ghostscript_10.0.0~dfsg-11+deb12u1.dsc
67a288151fd88f0d44e165429c48cc85d69b3e4d3765c95e60839a094bfb8df3 26688456
ghostscript_10.0.0~dfsg.orig.tar.xz
250b67a674434027fe32c08895e24b6fe0a281d3794e579a862efb6645b3824a 86840
ghostscript_10.0.0~dfsg-11+deb12u1.debian.tar.xz
8e21435af519f3a62ac6aaa1452c9e83187fec6ce5f523a6769ce8c5832986d5 7241
ghostscript_10.0.0~dfsg-11+deb12u1_source.buildinfo
Files:
cb59b0e8adc7ca0ee266caf8eb19bb48 3019 text optional
ghostscript_10.0.0~dfsg-11+deb12u1.dsc
ef38488b0a39c7064a027f4a4c9b9151 26688456 text optional
ghostscript_10.0.0~dfsg.orig.tar.xz
a4bf275a6bf53dc58af257ad30e9710a 86840 text optional
ghostscript_10.0.0~dfsg-11+deb12u1.debian.tar.xz
9bd155911b3b94f5b8930441ca4cb22e 7241 text optional
ghostscript_10.0.0~dfsg-11+deb12u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=vKWr
-----END PGP SIGNATURE-----
