Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6ab33370 by Salvatore Bonaccorso at 2023-08-02T08:25:09+02:00
Add CVE-2023-385{59,60}/ghostscript
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -9,9 +9,13 @@ CVE-2023-39109 (rconfig v3.9.4 was discovered to contain a
Server-Side Request F
CVE-2023-39108 (rconfig v3.9.4 was discovered to contain a Server-Side Request
Forgery ...)
NOT-FOR-US: rConfig
CVE-2023-38560 (An integer overflow flaw was found in pcl/pl/plfont.c:418 in
pl_glyph_ ...)
- TODO: check
+ - ghostscript <unfixed>
+ NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=706897
+ NOTE:
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=b7eb1d0174cb25a0cd44a1c0706c2ed73fc95bef
CVE-2023-38559 (A buffer overflow flaw was found in base/gdevdevn.c:1973 in
devn_pcx_w ...)
- TODO: check
+ - ghostscript <unfixed>
+ NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=706897
+ NOTE:
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=d81b82c70bc1fb9991bb95f1201abb5dea55f57f
CVE-2023-38357 (Session tokens in RWS WorldServer 11.7.3 and earlier have a
low entrop ...)
NOT-FOR-US: RWS WorldServer
CVE-2023-37478 (pnpm is a package manager. It is possible to construct a
tarball that, ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6ab33370d4a3603046abdb8dafff29e8c96bf153
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6ab33370d4a3603046abdb8dafff29e8c96bf153
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
