- Security fix for CVE-2019-6116 - Fix for bug #1687144 added. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-7b9bb0e426 2019-03-20 21:17:00.935183 --------------------------------------------------------------------------------Name : ghostscript Product : Fedora 28 Version : 9.26 Release : 3.fc28 URL : https://ghostscript.com/ Summary : Interpreter for PostScript language & PDF Description : This package provides useful conversion utilities based on Ghostscript software, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript (PS) and Portable Document Format (PDF) page description languages. Its primary purpose includes displaying (rasterization & rendering) and printing of document pages, as well as conversions between different document formats. --------------------------------------------------------------------------------Update Information: - Security fix for CVE-2019-6116 - Fix for bug #1687144 added --------------------------------------------------------------------------------ChangeLog: * Mon Mar 11 2019 Martin Osvald - 9.26-3 - Fix for bug #1687144 added * Fri Mar 8 2019 Martin Osvald - 9.26-2 - Fix for CVE-2019-6116 added (bug #1668888) * Thu Feb 7 2019 Martin Osvald - 9.26-1 - rebase to latest upstream version 9.26 - spec change to remove gsdoc.el due to upstream 8bc783cb586 * Mon Sep 17 2018 David Kaspar [Dee'Kej] - 9.25-1 - rebase to latest upstream version to fix additional issues found in 9.24 * Fri Sep 14 2018 David Kaspar [Dee'Kej] - 9.24-3 - ghostscript-9.24-002-icc-PermitReading.patch removed - ghostscript-9.24-002-fix-for-Canon-and-Kyocera-printers.patch added (bug #1626818) - ghostscript-9.24-003-CVE-2018-16802.patch added (bug #1627960) * Fri Sep 7 2018 Tom Callaway - 9.24-2 - add upstream fix for reading in ICC profiles * WedSep 5 2018 David Kaspar [Dee'Kej] - 9.24-1 - rebase to latest upstream version, which contains important CVE fixes - additional ZER0-DAY fixes added * Wed Aug 29 2018 David Kaspar [Dee'Kej] - 9.23-7 - ghostscript-9.23-002-fixes-for-set-of-CVEs-reported-by-Google.patch added * Mon Jul 30 2018 David Kaspar [Dee'Kej] - 9.23-6 - ghostscript-9.23-001-create-GC-descriptors-for-JPEG-passthrough.patch added (bug #1589467) * Fri Jul 13 2018 Fedora Release Engineering - 9.23-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Tue May 15 2018 David Kaspar [Dee'Kej] - 9.23-4 - One more rebuild for libidn ABI fix (BZ#'s 1573961 and 1566414) * Mon May 14 2018 David Kaspar [Dee'Kej] - 9.23-3 - %conflicts_vers bumped to fix F27-> F28 upgrade * Thu May 10 2018 Stephen Gallagher - 9.23-2.1 - Rebuilding for libidn ABI fix (BZ#'s 1573961 and 1566414) * Mon Apr 23 2018 David Kaspar [Dee'Kej] - 9.23-2 - Fix for CVE-2018-10194 added (bug #1569821) --------------------------------------------------------------------------------References: [ 1 ] Bug #1668888 - CVE-2019-6116 ghostscript: subroutines within pseudo-operators must themselves be pseudo-operators (700317) [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1668888 [ 2 ] Bug #1687144 - transparent png not supported in scribus https://bugzilla.redhat.com/show_bug.cgi?id=1687144 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-7b9bb0e426' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
This updates ghostscript to the latest stable release.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-8270 2009-08-04 23:59:59 -------------------------------------------------------------------------------- Name : ghostscript Product : Fedora 11 Version : 8.70 Release : 1.fc11 URL : https://www.ghostscript.com/ Summary : A PostScript interpreter and renderer. Description : Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures (the Ghostscript library, which implements the graphics capabilities in the PostScript language) and an interpreter for Portable Document Format (PDF) files. Ghostscript translates PostScript code into many common, bitmapped formats, like those understood by your printer or screen. Ghostscript is normally used to display PostScript files and to print PostScript files to non-PostScript printers. If you need to display PostScript files or print them to non-PostScript printers, you should install ghostscript. If you install ghostscript, you also need to install the ghostscript-fonts package. -------------------------------------------------------------------------------- Update Information: This updates ghostscript to the latest stable release. -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 3 2009 Tim Waugh 8.70-1 - 8.70. - License has changed to GPLv3+. Packages containing programs that link to libgs/libijs are: - foomatic (GPLv2+) - libspectre (GPLv2+) - ImageMagick (ImageMagick, listed on Licensing wiki page under "Good Licenses" and marked as GPLv3 compat) - gutenprint (GPLv2+) * Mon Aug 3 2009 Tim Waugh 8.64-12 - Moved examples to doc subpackage (bug #515167). - Converted spec file to UTF-8. * Thu Jul 30 2009 Tim Waugh 8.64-11 - Fixed CVE-2009-0583,0584 patch by using 255 as the maximum number of points, not 100, and by not treating a missing black point tagas an error (bug #487744). * Thu Jul 30 2009 Rex Dieter - 8.64-10 - License: GPLv2 and Redistributable, no modification permitted (bug #487510) * Fri Jul 24 2009 Fedora Release Engineering - 8.64-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild * Wed Jun 10 2009 Tim Waugh 8.64-8 - Fix scripts so they don't get broken on install (bug #502550). * Thu Jun 4 2009 Tim Waugh 8.64-7 - Applied patch to fix NULL dereference in JBIG2 decoder (bug #503995). -------------------------------------------------------------------------------- References: [ 1 ] Bug #503992 - Ghostscript: Multiple NULL pointer dereferences in JBIG2 decoder [F11] https://bugzilla.redhat.com/show_bug.cgi?id=503992 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update ghostscript' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list
Get the latest Linux and open source security news straight to your inbox.