Bug#925256: ghostscript: CVE-2019-3835: superexec operator is available

To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: Bug#925256: ghostscript: CVE-2019-3835: superexec operator is available
From: Salvatore Bonaccorso <carnil@debian.org>
Date: Thu, 21 Mar 2019 22:02:52 +0100
Message-id: <[🔎] 155320217211.21586.12886047626718905593.reportbug@eldamar.local>
Reply-to: Salvatore Bonaccorso <carnil@debian.org>, 925256@bugs.debian.org

Source: ghostscript
Version: 9.26a~dfsg-2
Severity: grave
Tags: security upstream
Justification: user security hole
Control: found -1 9.26a~dfsg-0+deb9u1

Hi,

The following vulnerability was published for ghostscript.

CVE-2019-3835[0]:
superexec operator is available

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2019-3835
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3835

Regards,
Salvatore

Reply to:

Follow-Ups:
- Processed: ghostscript: CVE-2019-3835: superexec operator is available
  - From: "Debian Bug Tracking System" <owner@bugs.debian.org>

Prev by Date: Processed: ghostscript: CVE-2019-3835: superexec operator is available
Next by Date: Bug#925257: ghostscript: CVE-2019-3838: forceput in DefineResource is still accessible
Previous by thread: Processed (with 1 error): Re: Bug#925222: hplip: hp-plugin doesn't work (hp-diagnose_plugin[4665]: error: Failed to install Plug-in)
Next by thread: Processed: ghostscript: CVE-2019-3835: superexec operator is available
Index(es):
- Date
- Thread