[Secure-testing-team] Bug#840451: ghostscript: CVE-2016-8602
Salvatore Bonaccorso
carnil at debian.org
Tue Oct 11 17:17:13 UTC 2016
Source: ghostscript
Version: 9.06~dfsg-2
Severity: grave
Tags: security upstream patch
Justification: user security hole
Forwarded: http://bugs.ghostscript.com/show_bug.cgi?id=697203
Hi,
the following vulnerability was published for ghostscript.
CVE-2016-8602[0]:
another type confusion bug
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2016-8602
[1] http://bugs.ghostscript.com/show_bug.cgi?id=697203
[2] http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=f5c7555c30393e64ec1f5ab0dfae5b55b3b3fc78
Regards,
Salvatore
More information about the Secure-testing-team
mailing list