tocsin

Debian/ghostscript: medium 5.4

Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters.

Action: Upgrade ghostscript to 10.0.0~dfsg-11+deb12u5 or later.

Affected

introducedfixedlast affected
010.0.0~dfsg-11+deb12u5-

Fixed versions

10.0.0~dfsg-11+deb12u5

Sources

published · modified · JSON