#18194 closed enhancement (fixed)
ghostscript-10.01.2
| Reported by: | Bruce Dubbs | Owned by: | Douglas R. Reno |
|---|---|---|---|
| Priority: | elevated | Milestone: | 12.0 |
| Component: | BOOK | Version: | git |
| Severity: | normal | Keywords: | |
| Cc: |
Description
New point version.
Change History (7)
comment:1 by , 3 years ago
comment:2 by , 3 years ago
| Owner: | changed from to |
|---|---|
| Status: | new → assigned |
comment:3 by , 3 years ago
Upstream seems to recommend looking at the git log for point releases, so I think those are the only notes we're going to get
comment:4 by , 3 years ago
| Resolution: | → fixed |
|---|---|
| Status: | assigned → closed |
comment:5 by , 3 years ago
| Priority: | normal → elevated |
|---|
From a post I saw on Sophos' website, it appears that CVE-2023-36664 was fixed in this version but not announced anywhere. It's another arbitrary code execution vulnerability that gets triggered by crafted PS documents.
Note:
See TracTickets
for help on using tickets.
I couldn't find the release note. A list of changes is available at https://github.com/ArtifexSoftware/ghostpdl/compare/ghostpdl-10.01.1...ghostpdl-10.01.2.