[Git][security-tracker-team/security-tracker][master] Further fixes for ghostscript via experimental upload

Salvatore Bonaccorso carnil at debian.org
Fri Sep 14 20:10:10 BST 2018


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8c12cd69 by Salvatore Bonaccorso at 2018-09-14T19:09:43Z
Further fixes for ghostscript via experimental upload

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2762,6 +2762,7 @@ CVE-2017-18345 (The Joomanager component through 2.0.0 for Joomla! has an arbitr
 	NOT-FOR-US: Joomla addon
 CVE-2018-16543 (In Artifex Ghostscript before 9.24, gssetresolution and gsgetresolution ...)
 	{DSA-4288-1}
+	[experimental] - ghostscript 9.25~dfsg-1~exp1
 	- ghostscript <unfixed> (bug #908303)
 	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=5b5536fa88a9e885032bc0df3852c3439399a5c0
 	NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=699670
@@ -2800,6 +2801,7 @@ CVE-2018-16511 (An issue was discovered in Artifex Ghostscript before 9.24. A ty
 	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=0edd3d6c634a577db261615a9dc2719bca7f6e01
 	NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=699659
 CVE-2018-16510 (An issue was discovered in Artifex Ghostscript before 9.24. Incorrect ...)
+	[experimental] - ghostscript 9.25~dfsg-1~exp1
 	- ghostscript <unfixed> (bug #908304)
 	[stretch] - ghostscript <not-affected> (Introduced in 9.22)
 	[jessie] - ghostscript <not-affected> (vulnerable code is not present)
@@ -2807,6 +2809,7 @@ CVE-2018-16510 (An issue was discovered in Artifex Ghostscript before 9.24. Inco
 	NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=699671
 CVE-2018-16509 (An issue was discovered in Artifex Ghostscript before 9.24. Incorrect ...)
 	{DLA-1504-1}
+	[experimental] - ghostscript 9.25~dfsg-1~exp1
 	- ghostscript <unfixed> (bug #907332; bug #907703)
 	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=78911a01b67d590b4a91afac2e8417360b934156
 	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=5516c614dc33662a2afdc377159f70218e67bde5
@@ -2816,6 +2819,7 @@ CVE-2018-16509 (An issue was discovered in Artifex Ghostscript before 9.24. Inco
 	NOTE: Partially fixed in 9.22~dfsg-3, see #907703
 CVE-2018-16585 (An issue was discovered in Artifex Ghostscript before 9.24. The ...)
 	{DSA-4288-1 DLA-1504-1}
+	[experimental] - ghostscript 9.25~dfsg-1~exp1
 	- ghostscript <unfixed> (bug #908305)
 	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=1497d65039885a52b598b137dd8622bd4672f9be
 	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=971472c83a345a16dac9f90f91258bb22dd77f22



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8c12cd69f817e12450d1e138f6e376ff91cf99fd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8c12cd69f817e12450d1e138f6e376ff91cf99fd
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180914/74ffb3bf/attachment.html>


More information about the debian-security-tracker-commits mailing list