An issue was discovered in decodeutf8 in base/gputf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal.
{ "binaries": [ { "binary_name": "ghostscript", "binary_version": "10.03.1~dfsg1-0ubuntu2.1" }, { "binary_name": "ghostscript-dbgsym", "binary_version": "10.03.1~dfsg1-0ubuntu2.1" }, { "binary_name": "ghostscript-doc", "binary_version": "10.03.1~dfsg1-0ubuntu2.1" }, { "binary_name": "libgs-common", "binary_version": "10.03.1~dfsg1-0ubuntu2.1" }, { "binary_name": "libgs-dev", "binary_version": "10.03.1~dfsg1-0ubuntu2.1" }, { "binary_name": "libgs10", "binary_version": "10.03.1~dfsg1-0ubuntu2.1" }, { "binary_name": "libgs10-common", "binary_version": "10.03.1~dfsg1-0ubuntu2.1" }, { "binary_name": "libgs10-dbgsym", "binary_version": "10.03.1~dfsg1-0ubuntu2.1" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }
{ "binaries": [ { "binary_name": "ghostscript", "binary_version": "10.02.1~dfsg1-0ubuntu7.4" }, { "binary_name": "ghostscript-dbgsym", "binary_version": "10.02.1~dfsg1-0ubuntu7.4" }, { "binary_name": "ghostscript-doc", "binary_version": "10.02.1~dfsg1-0ubuntu7.4" }, { "binary_name": "libgs-common", "binary_version": "10.02.1~dfsg1-0ubuntu7.4" }, { "binary_name": "libgs-dev", "binary_version": "10.02.1~dfsg1-0ubuntu7.4" }, { "binary_name": "libgs10", "binary_version": "10.02.1~dfsg1-0ubuntu7.4" }, { "binary_name": "libgs10-common", "binary_version": "10.02.1~dfsg1-0ubuntu7.4" }, { "binary_name": "libgs10-dbgsym", "binary_version": "10.02.1~dfsg1-0ubuntu7.4" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }