Univention Bugzilla – Bug 47481
ghostscript: Multiple issues (4.3)
Last modified: 2018-08-15 13:14:36 CEST
New Debian ghostscript 9.20~dfsg-3.2+deb9u2 fixes: This update addresses the following issue(s): * * The fill_threshhold_buffer function in base/gxht_thresh.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted PostScript document. (CVE-2016-10317) CVE_2017-7948 is open CVE_2017-8908 is open CVE_2017-9610 is open CVE_2017-9618 is open CVE_2017-9619 is open CVE_2017-9620 is open CVE_2017-9740 is open * The set_text_distance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document. (CVE-2018-10194) CVE_2018-11645 is open 9.20~dfsg-3.2+deb9u2 (Sun, 29 Apr 2018 10:58:15 +0200) * Non-maintainer upload. * Segfault with fuzzing file in gxht_thresh_image_init * Buffer overflow in fill_threshold_buffer (CVE-2016-10317) * pdfwrite - Guard against trying to output an infinite number (CVE-2018-10194) * CVE-2016-10317 ghostscript: Heap-buffer overflow in the fill_threshold_buffer function (CVE-2016-10317) * CVE-2018-10194 ghostscript: Stack-based out-of-bounds write in pdf_set_text_matrix function in gdevpdts.c (CVE-2018-10194)
--- mirror/ftp/4.3/unmaintained/4.3-0/source/ghostscript_9.20~dfsg-3.2+deb9u1.dsc +++ apt/ucs_4.3-0-errata4.3-1/source/ghostscript_9.20~dfsg-3.2+deb9u2.dsc @@ -1,3 +1,12 @@ +9.20~dfsg-3.2+deb9u2 [Sun, 29 Apr 2018 10:58:15 +0200] Salvatore Bonaccorso <carnil@debian.org>: + + * Non-maintainer upload. + * Segfault with fuzzing file in gxht_thresh_image_init + * Buffer overflow in fill_threshold_buffer (CVE-2016-10317) + (Closes: #860869) + * pdfwrite - Guard against trying to output an infinite number + (CVE-2018-10194) (Closes: #896069) + 9.20~dfsg-3.2+deb9u1 [Thu, 28 Sep 2017 21:47:33 +0200] Salvatore Bonaccorso <carnil@debian.org>: * Non-maintainer upload by the Security Team. <http://10.200.17.11/4.3-1/#1189116332664772647>
OK: patches OK: piuparts OK: yaml OK: errata-announce ghostscript.yaml [4.3-1] 7f6596f238 Bug #47481: ghostscript 9.20~dfsg-3.2+deb9u2 doc/errata/staging/ghostscript.yaml | 15 +++++++++++++++ 1 file changed, 15 insertions(+)
<http://errata.software-univention.de/ucs/4.3/181.html>