Univention Bugzilla – Bug 55948
ghostscript: Multiple issues (5.0)
Last modified: 2023-04-12 13:21:52 CEST
New Debian ghostscript 9.27~dfsg-2+deb10u7 fixes: This update addresses the following issue: * In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled to one byte less than full, and one then tries to write an escaped character, two bytes are written. (CVE-2023-28879)
--- mirror/ftp/pool/main/g/ghostscript/ghostscript_9.27~dfsg-2+deb10u6.dsc +++ apt/ucs_5.0-0-errata5.0-3/source/ghostscript_9.27~dfsg-2+deb10u7.dsc @@ -1,3 +1,12 @@ +9.27~dfsg-2+deb10u7 [Tue, 04 Apr 2023 17:10:03 +0100] Chris Lamb <lamby@debian.org>: + + * Non-maintainer upload by the LTS team. + * CVE-2023-28879: Prevent a potential a buffer-overflow vulnerability. + (Closes: #1033757) + * Move to Git & Salsa-based packaging: + - Add debian/.gitlab-ci.yml + - Disable a few (failing) tests in the CI system. + 9.27~dfsg-2+deb10u6 [Sat, 03 Sep 2022 23:19:16 +0200] Markus Koschany <apo@debian.org>: * Non-maintainer upload by the LTS team. <http://piuparts.knut.univention.de/5.0-3/#7467599451998399997>
OK: bug OK: yaml OK: announce_errata OK: patch OK: piuparts [5.0-3] 7e078efbc4 Bug #55948: ghostscript 9.27~dfsg-2+deb10u7 doc/errata/staging/ghostscript.yaml | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) [5.0-3] 788de455dc Bug #55948: ghostscript 9.27~dfsg-2+deb10u7 doc/errata/staging/ghostscript.yaml | 17 +++++++++++++++++ 1 file changed, 17 insertions(+)
<https://errata.software-univention.de/#/?erratum=5.0x640>