Debian/ghostscript: unknown
The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (
Action: Upgrade ghostscript to 8.71~dfsg-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 8.71~dfsg-2 | - |
Fixed versions
| 8.71~dfsg-2 |
Sources
- osv: DEBIAN-CVE-2009-3720#Debian:14/ghostscript
- https://security-tracker.debian.org/tracker/CVE-2009-3720
published · modified · JSON