Debian/ghostscript: high 7.8

Artifex Ghostscript through 9.26 mishandles .completefont. NOTE: this issue exists because of an incomplete fix for CVE-2019-3839.

Action: Upgrade ghostscript to 9.27~dfsg-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2019-25059#Debian:14/ghostscript
• https://security-tracker.debian.org/tracker/CVE-2019-25059

published 2022-04-25T04:15:07.800Z · modified 2026-09-21T07:02:55.375605413Z · JSON