Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6946c625 by Salvatore Bonaccorso at 2023-09-14T07:04:08+02:00
Update information for CVE-2023-38559 and CVE-2023-38560 in ghostscript
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -6092,17 +6092,17 @@ CVE-2023-39109 (rconfig v3.9.4 was discovered to
contain a Server-Side Request F
CVE-2023-39108 (rconfig v3.9.4 was discovered to contain a Server-Side Request
Forgery ...)
NOT-FOR-US: rConfig
CVE-2023-38560 (An integer overflow flaw was found in pcl/pl/plfont.c:418 in
pl_glyph_ ...)
- - ghostscript <unfixed> (unimportant)
+ - ghostscript 10.02.0~dfsg-1 (unimportant)
NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=706898
- NOTE:
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=b7eb1d0174cb25a0cd44a1c0706c2ed73fc95bef
+ NOTE:
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=b7eb1d0174cb25a0cd44a1c0706c2ed73fc95bef
(ghostpdl-10.02.0rc1)
NOTE: Issue in PCL support shipped sourcewise in src:ghostscript
CVE-2023-38559 (A buffer overflow flaw was found in base/gdevdevn.c:1973 in
devn_pcx_w ...)
{DLA-3519-1}
- - ghostscript <unfixed> (bug #1043033)
+ - ghostscript 10.02.0~dfsg-1 (bug #1043033)
[bookworm] - ghostscript <postponed> (Minor issue; can be batched
together in a later update)
[bullseye] - ghostscript <postponed> (Minor issue; can be batched
together in a later update)
NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=706897
- NOTE:
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=d81b82c70bc1fb9991bb95f1201abb5dea55f57f
+ NOTE:
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=d81b82c70bc1fb9991bb95f1201abb5dea55f57f
(ghostpdl-10.02.0rc1)
CVE-2023-38357 (Session tokens in RWS WorldServer 11.7.3 and earlier have a
low entrop ...)
NOT-FOR-US: RWS WorldServer
CVE-2023-37478 (pnpm is a package manager. It is possible to construct a
tarball that, ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6946c62549a96053d915cfd043208e77cf168f03
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6946c62549a96053d915cfd043208e77cf168f03
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
