[Git][security-tracker-team/security-tracker][master] Add CVE-2019-3838/ghostscript

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
858dc04b by Salvatore Bonaccorso at 2019-03-21T15:48:39Z
Add CVE-2019-3838/ghostscript

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -14807,8 +14807,13 @@ CVE-2019-3840 [NULL pointer dereference after running qemuAgentCommand in qemuAg
 	NOTE: https://libvirt.org/git/?p=libvirt.git;a=commit;h=7cfd1fbb1332ae5df678b9f41a62156cb2e88c73
 CVE-2019-3839
 	RESERVED
-CVE-2019-3838
+CVE-2019-3838 [forceput in DefineResource is still accessible]
 	RESERVED
+	- ghostscript <unfixed>
+	NOTE: https://www.openwall.com/lists/oss-security/2019/03/21/1
+	NOTE: https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=ed9fcd95bb01
+	NOTE: https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=a82601e8f95a
+	NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=700576
 CVE-2019-3837
 	RESERVED
 CVE-2019-3836



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/858dc04b05be48ae4ec12a91a3542d3984a3a442

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/858dc04b05be48ae4ec12a91a3542d3984a3a442
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190321/196fa336/attachment.html>