[Git][security-tracker-team/security-tracker][master] Add CVE-2018-15909/ghostscript

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
870fc6d8 by Salvatore Bonaccorso at 2018-08-27T20:16:49Z
Add CVE-2018-15909/ghostscript

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3,7 +3,10 @@ CVE-2018-15910 (In Artifex Ghostscript 9.23 before 2018-08-23, attackers able to
 	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=c3476dde7743761a4e1d39a631716199b696b880
 	NOTE: https://www.kb.cert.org/vuls/id/332928
 CVE-2018-15909 (In Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using ...)
-	TODO: check
+	- ghostscript <unfixed> (bug #907332)
+	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=0b6cd1918e1ec4ffd087400a754a845180a4522b
+	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=e01e77a36cbb2e0277bc3a63852244bec41be0f6
+	NOTE: https://www.kb.cert.org/vuls/id/332928
 CVE-2018-15908 (In Artifex Ghostscript 9.23 before 2018-08-23, attackers are able to ...)
 	TODO: check
 CVE-2018-15907
@@ -86,7 +89,6 @@ CVE-2018-XXXX [Multiple -dSAFER sandbox bypass vulnerabilities]
 	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=8e9ce501
 	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=241d9111
 	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=c432131c
-	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=e01e77a3
 	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=0edd3d6c
 	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=a054156d
 	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=0d390118



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/870fc6d820bef0f5dbc8a13fd0a65fb46d8438bd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/870fc6d820bef0f5dbc8a13fd0a65fb46d8438bd
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180827/9712a953/attachment.html>