CVE-2018-16539

Name	CVE-2018-16539
Description	In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect access checking in temp file handling to disclose contents of files on the system otherwise not readable.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-1504-1, DSA-4288-1
Debian Bugs	907332

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
ghostscript (PTS)	jessie, jessie (lts)	9.26a~dfsg-0+deb8u12	fixed
	stretch (security)	9.26a~dfsg-0+deb9u9	fixed
	stretch (lts), stretch	9.26a~dfsg-0+deb9u12	fixed
	buster (security), buster, buster (lts)	9.27~dfsg-2+deb10u9	fixed
	bullseye	9.53.3~dfsg-7+deb11u7	fixed
	bullseye (security)	9.53.3~dfsg-7+deb11u8	fixed
	bookworm	10.0.0~dfsg-11+deb12u5	fixed
	bookworm (security)	10.0.0~dfsg-11+deb12u6	fixed
	sid, trixie	10.04.0~dfsg-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
ghostscript	source	wheezy	(unfixed)	end-of-life
ghostscript	source	jessie	9.06~dfsg-2+deb8u8		DLA-1504-1
ghostscript	source	stretch	9.20~dfsg-3.2+deb9u4		DSA-4288-1
ghostscript	source	(unstable)	9.22~dfsg-3			907332

Notes

https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=a054156d425b4dbdaaa9fda4b5f1182b27598c2b
https://bugs.ghostscript.com/show_bug.cgi?id=699658
To not break cups with https://github.com/apple/cups/issues/5392
an additional (no-security) followup fix is needed as:
https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=150c8f69646b854a99f35f27edaae012eb2e900f
Cf. https://bugs.debian.org/908300