tocsin

Debian/ghostscript: critical 9.8

Artifex Ghostscript before 9.53.0 has an out-of-bounds write and use-after-free in devices/vector/gdevtxtw.c (for txtwrite) because a single character code in a PDF document can map to more than one U

Action: Upgrade ghostscript to 9.53.0~dfsg-1 or later.

Affected

introducedfixedlast affected
09.53.0~dfsg-1-

Fixed versions

9.53.0~dfsg-1

Sources

published · modified · JSON