A ghostscript security update has been released for Debian GNU/Linux 8 and 9 Extended LTS to address a heap-based buffer over write vulnerability.

ELA-673-1 ghostscript security update

Package ghostscript
Version 9.26a~dfsg-0+deb8u10 (jessie), 9.26a~dfsg-0+deb9u10 (stretch)
Related CVEs CVE-2020-27792

A heap-based buffer over write vulnerability was found in GhostScript, the GPL PostScript/PDF interpreter. An attacker could trick a user to open a crafted PDF file, triggering the heap buffer overflow that could lead to memory corruption or a denial of service.

For Debian 8 jessie, these problems have been fixed in version 9.26a~dfsg-0+deb8u10.

For Debian 9 stretch, these problems have been fixed in version 9.26a~dfsg-0+deb9u10.

We recommend that you upgrade your ghostscript packages.

Further information about Extended LTS security advisories can be found at: https://deb.freexian.com/extended-lts/

  ELA-673-1 ghostscript security update