CVE-2019-25059
Fixed in a distro release EPSS 1%
Artifex Ghostscript through 9.26 mishandles .completefont. NOTE: this issue exists because of an incomplete fix for CVE-2019-3839.
Products: artifex ghostscript, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | ghostscript | 9.25-5.amzn2.0.2 |
| Amazon Linux 2 | ghostscript-cups | 9.25-5.amzn2.0.2 |
| Amazon Linux 2 | ghostscript-doc | 9.25-5.amzn2.0.2 |
| Amazon Linux 2 | ghostscript-gtk | 9.25-5.amzn2.0.2 |
| Amazon Linux 2 | libgs | 9.25-5.amzn2.0.2 |
| Amazon Linux 2 | libgs-devel | 9.25-5.amzn2.0.2 |
| Debian 12 | ghostscript | 9.27~dfsg-1 |
| Debian 13 | ghostscript | 9.27~dfsg-1 |
| Debian 14 | ghostscript | 9.27~dfsg-1 |
| Debian 9 | ghostscript | 9.26a~dfsg-0+deb9u9 |
| Ubuntu 18.04 LTS | ghostscript | 9.26~dfsg+0-0ubuntu0.18.04.16 |
| Ubuntu Pro 16.04 LTS | ghostscript | 9.26~dfsg+0-0ubuntu0.16.04.14+esm3 |