Public bug reported: This vulnerability has been reported and fixed upstream, but no CVE has been assigned (yet).
For more details: https://bugs.ghostscript.com/show_bug.cgi?id=709684 https://security-tracker.debian.org/tracker/TEMP-0000000-E17884 ** Affects: ghostscript (Ubuntu) Importance: Undecided Assignee: Charles Cochran (charlescochran) Status: New ** Changed in: ghostscript (Ubuntu) Assignee: (unassigned) => Charles Cochran (charlescochran) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2171528 Title: Type 1 font-loader `.forceput` save/restore UAF yields native read/write and controlled dispatch/RCE under `-dSAFER` To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ghostscript/+bug/2171528/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
