Debian/libgxps: medium 6.5
There is a stack-based buffer over-read in calling GLib in the function gxps_images_guess_content_type of gxps-images.c in libgxps through 0.3.0 because it does not reject negative return values from
Action: Upgrade libgxps to 0.3.0-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.0-3 | - |
Fixed versions
| 0.3.0-3 |
Sources
- osv: DEBIAN-CVE-2018-10767#Debian:14/libgxps
- https://security-tracker.debian.org/tracker/CVE-2018-10767
published · modified · JSON