Bug#994011: marked as done (ghostscript: CVE-2021-3781)
Your message dated Thu, 09 Sep 2021 19:10:57 +0000
with message-id <E1mOPRp-000E5J-Bd@fasolo.debian.org>
and subject line Bug#994011: fixed in ghostscript 9.54.0~dfsg-2
has caused the Debian Bug report #994011,
regarding ghostscript: CVE-2021-3781
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)
--
994011: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=994011
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Source: ghostscript
Version: 9.53.3~dfsg-7
Severity: grave
Tags: security upstream
Justification: user security hole
Forwarded: https://bugs.ghostscript.com/show_bug.cgi?id=704342
X-Debbugs-Cc: carnil@debian.org, Debian Security Team <team@security.debian.org>
Hi,
The following vulnerability was published for ghostscript.
CVE-2021-3781[0].
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2021-3781
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3781
[1] https://bugs.ghostscript.com/show_bug.cgi?id=704342 (not public yet)
[2] https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=a9bd3dec9fde
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
Source: ghostscript
Source-Version: 9.54.0~dfsg-2
Done: Jonas Smedegaard <dr@jones.dk>
We believe that the bug you reported is fixed in the latest version of
ghostscript, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 994011@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Jonas Smedegaard <dr@jones.dk> (supplier of updated ghostscript package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 09 Sep 2021 20:41:03 +0200
Source: ghostscript
Architecture: source
Version: 9.54.0~dfsg-2
Distribution: experimental
Urgency: medium
Maintainer: Debian Printing Team <debian-printing@lists.debian.org>
Changed-By: Jonas Smedegaard <dr@jones.dk>
Closes: 994011
Changes:
ghostscript (9.54.0~dfsg-2) experimental; urgency=medium
.
* copyright-check: improve progress messages
* add patch cherry-picked upstream
to fix access validationaccess validation;
closes: bug#994011;
CVE-2021-3781
* declare compliance with Debian Policy 4.6.0
Checksums-Sha1:
602bb43437091f0a98ff24a2ebf186d6dd3c2edb 2677 ghostscript_9.54.0~dfsg-2.dsc
48347ce53fdcb9764f281f243742b329b54969eb 119700 ghostscript_9.54.0~dfsg-2.debian.tar.xz
75b686cceb4287977f0a1dcc9761b1f24bf6a7eb 11797 ghostscript_9.54.0~dfsg-2_amd64.buildinfo
Checksums-Sha256:
e5941cd6b3af766f1c5fee0e95c67b8b4eb8c58633ff29531c6462481cf1c17f 2677 ghostscript_9.54.0~dfsg-2.dsc
b00980106868beb6f296295d23527f1379730b645e1b5cf5fb6e788987e8632f 119700 ghostscript_9.54.0~dfsg-2.debian.tar.xz
2ec413e4ed473635e152bf6a16c6aef49d98c9800d33bb9ea0fa0d2d0f62ee79 11797 ghostscript_9.54.0~dfsg-2_amd64.buildinfo
Files:
2aa12939b54c753036077adedf6df31d 2677 text optional ghostscript_9.54.0~dfsg-2.dsc
ffdda551adbba68430793cc24b49dcd6 119700 text optional ghostscript_9.54.0~dfsg-2.debian.tar.xz
1689f1842053cc319e20a404b7621ae5 11797 text optional ghostscript_9.54.0~dfsg-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=zQT2
-----END PGP SIGNATURE-----
--- End Message ---
Reply to: