tocsin

Debian/ghostscript: medium 5.5

It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example,

Action: Upgrade ghostscript to 9.27~dfsg-1 or later.

Affected

introducedfixedlast affected
09.27~dfsg-1-

Fixed versions

9.27~dfsg-1

Sources

published · modified · JSON