[Git][security-tracker-team/security-tracker][master] Add CVE-2019-3839/ghostscript

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9f016654 by Salvatore Bonaccorso at 2019-05-03T08:04:08Z
Add CVE-2019-3839/ghostscript

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -19467,8 +19467,12 @@ CVE-2019-3840 (A NULL pointer dereference flaw was discovered in libvirt before
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1663051
 	NOTE: https://www.redhat.com/archives/libvir-list/2019-January/msg00241.html
 	NOTE: https://libvirt.org/git/?p=libvirt.git;a=commit;h=7cfd1fbb1332ae5df678b9f41a62156cb2e88c73
-CVE-2019-3839
+CVE-2019-3839 [missing attack vector protections for CVE-2019-6116]
 	RESERVED
+	- ghostscript 9.27~dfsg-1
+	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4ec9ca74bed49f2a82acb4bf430eae0d8b3b75c9
+	NOTE: To prevent pdf2dsc regression additionally:
+	NOTE: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=db24f253409d5d085c2760c814c3e1d3fa2dac59
 CVE-2019-3838 (It was found that the forceput operator could be extracted from the De ...)
 	{DSA-4432-1 DLA-1761-1}
 	[experimental] - ghostscript 9.27~~dc1~dfsg-1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/9f01665476cbbe88af45acd566e8355ab3f7884e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/9f01665476cbbe88af45acd566e8355ab3f7884e
You're receiving this email because of your account on salsa.debian.org.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190503/5f0e2168/attachment.html>