[Git][security-tracker-team/security-tracker][master] Try to clarify the ghostscript mitigation for recent versions in 9.28

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
91985b6a by Salvatore Bonaccorso at 2019-08-28T13:39:20Z
Try to clarify the ghostscript mitigation for recent versions in 9.28

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2620,7 +2620,9 @@ CVE-2019-14817
 	- ghostscript <unfixed>
 	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=cd1b1cacadac2479e291efe611979bdc1b3bdb19
 	NOTE: https://www.openwall.com/lists/oss-security/2019/08/28/2
-	NOTE: For recent versions the issue is mitigated starting from http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=7ecbfda92b4c8dbf6f6c2bf8fc82020a29219eff
+	NOTE: For recent versions (9.28~~rc1~dfsg-1) the issue is mitigated starting
+	NOTE: from http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=7ecbfda92b4c8dbf6f6c2bf8fc82020a29219eff
+	NOTE: which changed the access to file permissions.
 CVE-2019-14816
 	RESERVED
 	- linux <unfixed>
@@ -2635,19 +2637,25 @@ CVE-2019-14813
 	- ghostscript <unfixed>
 	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=885444fcbe10dc42787ecb76686c8ee4dd33bf33
 	NOTE: https://www.openwall.com/lists/oss-security/2019/08/28/2
-	NOTE: For recent versions the issue is mitigated starting from http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=7ecbfda92b4c8dbf6f6c2bf8fc82020a29219eff
+	NOTE: For recent versions (9.28~~rc1~dfsg-1) the issue is mitigated starting
+	NOTE: from http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=7ecbfda92b4c8dbf6f6c2bf8fc82020a29219eff
+	NOTE: which changed the access to file permissions.
 CVE-2019-14812
 	RESERVED
 	- ghostscript <unfixed>
 	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=885444fcbe10dc42787ecb76686c8ee4dd33bf33
 	NOTE: https://www.openwall.com/lists/oss-security/2019/08/28/2
-	NOTE: For recent versions the issue is mitigated starting from http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=7ecbfda92b4c8dbf6f6c2bf8fc82020a29219eff
+	NOTE: For recent versions (9.28~~rc1~dfsg-1) the issue is mitigated starting
+	NOTE: from http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=7ecbfda92b4c8dbf6f6c2bf8fc82020a29219eff
+	NOTE: which changed the access to file permissions.
 CVE-2019-14811
 	RESERVED
 	- ghostscript <unfixed>
 	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=885444fcbe10dc42787ecb76686c8ee4dd33bf33
 	NOTE: https://www.openwall.com/lists/oss-security/2019/08/28/2
-	NOTE: For recent versions the issue is mitigated starting from http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=7ecbfda92b4c8dbf6f6c2bf8fc82020a29219eff
+	NOTE: For recent versions (9.28~~rc1~dfsg-1) the issue is mitigated starting
+	NOTE: from http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=7ecbfda92b4c8dbf6f6c2bf8fc82020a29219eff
+	NOTE: which changed the access to file permissions.
 CVE-2019-14810
 	RESERVED
 CVE-2019-14809 (net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malfo ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/91985b6a449e0949f5540a3350deb9460699ede8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/91985b6a449e0949f5540a3350deb9460699ede8
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190828/df9294db/attachment.html>