Errata overview
Errata ID 295
Date 2018-02-14
Source package ghostscript
Fixed in version 9.06~dfsg-2+deb8u6
Description
This update addresses the following issues:
* Bounds check the array allocations methods (CVE-2017-9835)
* Bounds check zone pointer in Ins_MIRP() (CVE-2017-9611)
* Bounds check zone pointers in Ins_IP() (CVE-2017-9612)
* Bounds check zone pointer in Ins_MDRP (CVE-2017-9726)
* Make bounds check in gx_ttfReader__Read more robust (CVE-2017-9727)
* Bounds check Ins_JMPR (CVE-2017-9739)
* Prevent trying to reloc a freed object (CVE-2017-11714)
Additional notes
CVE ID CVE-2017-9612
CVE-2017-9611
CVE-2017-9739
CVE-2017-9835
CVE-2017-11714
CVE-2017-9727
CVE-2017-9726
UCS Bug number #45616