Bug#925257: ghostscript: CVE-2019-3838: forceput in DefineResource is still accessible

To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: Bug#925257: ghostscript: CVE-2019-3838: forceput in DefineResource is still accessible
From: Salvatore Bonaccorso <carnil@debian.org>
Date: Thu, 21 Mar 2019 22:04:25 +0100
Message-id: <[🔎] 155320226546.21786.16492472491561568640.reportbug@eldamar.local>
Reply-to: Salvatore Bonaccorso <carnil@debian.org>, 925257@bugs.debian.org

Source: ghostscript
Version: 9.26a~dfsg-2
Severity: grave
Tags: security upstream
Forwarded: https://bugs.ghostscript.com/show_bug.cgi?id=700576
Control: found -1 9.26a~dfsg-0+deb9u1

Hi,

The following vulnerability was published for ghostscript.

CVE-2019-3838[0]:
forceput in DefineResource is still accessible

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2019-3838
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3838

Regards,
Salvatore

Reply to:

Follow-Ups:
- Processed: ghostscript: CVE-2019-3838: forceput in DefineResource is still accessible
  - From: "Debian Bug Tracking System" <owner@bugs.debian.org>

Prev by Date: Bug#925256: ghostscript: CVE-2019-3835: superexec operator is available
Next by Date: Processed: ghostscript: CVE-2019-3838: forceput in DefineResource is still accessible
Previous by thread: Processed: ghostscript: CVE-2019-3835: superexec operator is available
Next by thread: Processed: ghostscript: CVE-2019-3838: forceput in DefineResource is still accessible
Index(es):
- Date
- Thread