[ubuntu/mantic-proposed] ghostscript 10.01.2~dfsg1-0ubuntu2 (Accepted)

[Allen Huang]

ghostscript (10.01.2~dfsg1-0ubuntu2) mantic; urgency=medium

  * SECURITY UPDATE: buffer overflow
    - debian/patches/CVE-2023-38559.patch: bounds check the buffer prior to
      deferencing the pointer in devn_pcx_write_rle() in base/gdevdevn.c.
    - CVE-2023-38559

Date: Thu, 21 Sep 2023 17:06:57 +0200
Changed-By: Allen Huang <allen.huang at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/ghostscript/10.01.2~dfsg1-0ubuntu2
-------------- next part --------------
Format: 1.8
Date: Thu, 21 Sep 2023 17:06:57 +0200
Source: ghostscript
Built-For-Profiles: noudeb
Architecture: source
Version: 10.01.2~dfsg1-0ubuntu2
Distribution: mantic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Allen Huang <allen.huang at canonical.com>
Changes:
 ghostscript (10.01.2~dfsg1-0ubuntu2) mantic; urgency=medium
 .
   * SECURITY UPDATE: buffer overflow
     - debian/patches/CVE-2023-38559.patch: bounds check the buffer prior to
       deferencing the pointer in devn_pcx_write_rle() in base/gdevdevn.c.
     - CVE-2023-38559
Checksums-Sha1:
 4ed120c3885900a3b116ceca1016be2b77b09a7d 2949 ghostscript_10.01.2~dfsg1-0ubuntu2.dsc
 e396ff91977d00063eb945a6b32f09b9f927a0d0 85256 ghostscript_10.01.2~dfsg1-0ubuntu2.debian.tar.xz
 cd973a921f2a274f200e23a64bcfa79b8636b78c 15883 ghostscript_10.01.2~dfsg1-0ubuntu2_source.buildinfo
Checksums-Sha256:
 d38edd38c41295252cc8d34f19c3d39fa4ae3851716e5cd7975b366478e1fb4a 2949 ghostscript_10.01.2~dfsg1-0ubuntu2.dsc
 7e7e88d094ccb389165e72778ed7a34e40a4be473547cf78c30b79ea25575ea9 85256 ghostscript_10.01.2~dfsg1-0ubuntu2.debian.tar.xz
 a118f0c450ba3cbfeb03542fe61ca88bf156181c7ebec885596035223ce372e3 15883 ghostscript_10.01.2~dfsg1-0ubuntu2_source.buildinfo
Files:
 48276c008ad20cd9afdd96d42e81c7b1 2949 text optional ghostscript_10.01.2~dfsg1-0ubuntu2.dsc
 124f6669edf37424f22acb7d1752cc53 85256 text optional ghostscript_10.01.2~dfsg1-0ubuntu2.debian.tar.xz
 c4615bd631987409ea0a42fa253ab36b 15883 text optional ghostscript_10.01.2~dfsg1-0ubuntu2_source.buildinfo
Original-Maintainer: Debian QA Group <packages at qa.debian.org>