[Git][security-tracker-team/security-tracker][master] Add CVE-2018-15910

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f5256021 by Salvatore Bonaccorso at 2018-08-27T20:15:17Z
Add CVE-2018-15910

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,5 +1,7 @@
 CVE-2018-15910 (In Artifex Ghostscript 9.23 before 2018-08-23, attackers able to supply ...)
-	TODO: check
+	- ghostscript <unfixed> (bug #907332)
+	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=c3476dde7743761a4e1d39a631716199b696b880
+	NOTE: https://www.kb.cert.org/vuls/id/332928
 CVE-2018-15909 (In Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using ...)
 	TODO: check
 CVE-2018-15908 (In Artifex Ghostscript 9.23 before 2018-08-23, attackers are able to ...)
@@ -88,7 +90,6 @@ CVE-2018-XXXX [Multiple -dSAFER sandbox bypass vulnerabilities]
 	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=0edd3d6c
 	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=a054156d
 	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=0d390118
-	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=c3476dde
 	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=b326a716
 	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=78911a01
 	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=5516c614



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f525602101ab61c9303411c7442dbcb6dd43b7d9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f525602101ab61c9303411c7442dbcb6dd43b7d9
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180827/e99f1a92/attachment.html>