-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2010-0350 2010-01-08 19:39:30 --------------------------------------------------------------------------------
Name : ghostscript Product : Fedora 11 Version : 8.70 Release : 2.fc11 URL : http://www.ghostscript.com/ Summary : A PostScript interpreter and renderer. Description : Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures (the Ghostscript library, which implements the graphics capabilities in the PostScript language) and an interpreter for Portable Document Format (PDF) files. Ghostscript translates PostScript code into many common, bitmapped formats, like those understood by your printer or screen. Ghostscript is normally used to display PostScript files and to print PostScript files to non-PostScript printers. If you need to display PostScript files or print them to non-PostScript printers, you should install ghostscript. If you install ghostscript, you also need to install the ghostscript-fonts package. -------------------------------------------------------------------------------- Update Information: Fixed debugging output from CUPS raster driver (CVE-2009-4270) and hardened ghostscript's debugging output functions. -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 24 2009 Tim Waugh <[email protected]> 8.70-2 - Fix debugging output from gdevcups (CVE-2009-4270, bug #540760). - Harden ghostscript's debugging output functions (bug #540760). * Mon Aug 3 2009 Tim Waugh <[email protected]> 8.70-1 - 8.70. - License has changed to GPLv3+. Packages containing programs that link to libgs/libijs are: - foomatic (GPLv2+) - libspectre (GPLv2+) - ImageMagick (ImageMagick, listed on Licensing wiki page under "Good Licenses" and marked as GPLv3 compat) - gutenprint (GPLv2+) * Mon Aug 3 2009 Tim Waugh <[email protected]> 8.64-12 - Moved examples to doc subpackage (bug #515167). - Converted spec file to UTF-8. * Thu Jul 30 2009 Tim Waugh <[email protected]> 8.64-11 - Fixed CVE-2009-0583,0584 patch by using 255 as the maximum number of points, not 100, and by not treating a missing black point tag as an error (bug #487744). * Thu Jul 30 2009 Rex Dieter <[email protected]> - 8.64-10 - License: GPLv2 and Redistributable, no modification permitted (bug #487510) * Fri Jul 24 2009 Fedora Release Engineering <[email protected]> - 8.64-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild * Wed Jun 10 2009 Tim Waugh <[email protected]> 8.64-8 - Fix scripts so they don't get broken on install (bug #502550). * Thu Jun 4 2009 Tim Waugh <[email protected]> 8.64-7 - Applied patch to fix NULL dereference in JBIG2 decoder (bug #503995). -------------------------------------------------------------------------------- References: [ 1 ] Bug #540760 - CVE-2009-4270 ghostscript buffer overflow in cups output driver https://bugzilla.redhat.com/show_bug.cgi?id=540760 [ 2 ] Bug #550852 - pstoraster fails on signal 6, can't print to HP PSC1610 https://bugzilla.redhat.com/show_bug.cgi?id=550852 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update ghostscript' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list [email protected] https://admin.fedoraproject.org/mailman/listinfo/package-announce
