[Bluewhite64 Linux Security] ghostscript [BW64SA:20090704-02]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


[Bluewhite64 Linux Security] ghostscript [BW64SA:20090704-02]


More details about the issues may be found here:

http://www.mozilla.org/security/known-vulnerabilities/thunderbird20.html

New ghostscript packages are available for Bluewhite64 Linux 12.1, 12.2, and -current
to fix security issues.

More details about this issue may be found in the Common
Vulnerabilities and Exposures (CVE) database:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0196
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0583
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0584
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0792


Here are the details from the Bluewhite64 Linux 12.2 ChangeLog:
- ----------------------------------------------------------------
PATCHES/packages/ghostscript-8.63-x86_64-3.tgz: Recompiled.
Patched various problems with ghostscript that could lead to a denial
of service or the execution of arbitrary code when processing a malicious
or malformed file.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0196
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0583
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0584
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0792
[*** Security fix ***]


Download the new packages from:
- --------------------------------
For Bluewhite64 Linux 12.1:
http://data.bluewhite64.com/bluewhite64-12.1/patches/packages/ghostscript-8.62-x86_64-5.tgz

For Bluewhite64 Linux 12.2:
http://data.bluewhite64.com/bluewhite64-12.2/patches/packages/ghostscript-8.63-x86_64-2.tgz

For Bluewhite64 Linux -current:
http://data.bluewhite64.com/bluewhite64-current/bluewhite64/ap/ghostscript-8.64-x86_64-2.txt

Also, please see the "Get Bluewhite64" section on http://www.bluewhite64.com for
additional mirror sites near you.


MD5 signatures:
- ----------------
Bluewhite64 12.1 package:
4dcb34780ee06b19eca81b3635cb16cb ghostscript-8.62-x86_64-5.tgz

Bluewhite64 12.2 package:
fe952c0a8bc93c49ce9d84a3174dc9bd ghostscript-8.63-x86_64-2.tgz

Bluewhite64 -current package:
e666d6efd9932424aa4c9ed9ccd5a8c2 ghostscript-8.64-x86_64-2.txt


Installation instructions:
- ----------------------------
Upgrade the package as root:
# upgradepkg ghostscript-8.63-x86_64-2.tgz



- ---
Bluewhite64 Linux Security Team
http://bluewhite64.com/gpg-key

security©bluewhite64.com


- ------------------------------------------------------
To leave the bluewhite64-security mailing list:
Send a blank email to

bluewhite64-security-unsubscribe©bluewhite64.com

You will get a confirmation message back containing
instructions to complete the process.

Please do not reply to this email address.
- ------------------------------------------------------




-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkpPMroACgkQpTOsxuDdlY4BhACfcSuN6t1IvFSQRiDA/ArTviHe
+QMAn0LFJROzk5B6R6xy32vT9ZptSk9+
=kGgO
-----END PGP SIGNATURE-----