Summary
[9.07-28]
- Security fix for CVE-2017-8291 updated to address SIGSEGV
[9.07-27]
- Added security fix for CVE-2017-8291 (bug #1446063)
[9.07-26]
- Updated requirements for lcms2 to avoid possible issues in the future
[9.07-25]
- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)
[9.07-24]
- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)
[9.07-23]
- Fix for regression caused by previous CVE fixes (bug #1411725)
[9.07-22]
- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)
[9.07-21]
- Added security fixes for:
- CVE-2013-5653 (bug #1380327)
- CVE-2016-7977 (bug #1380415)
- CVE-2016-7978 (bug #1382300)
- CVE-2016-7979 (bug #1382305)
- CVE-2016-8602 (bug #1383940)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | ghostscript | 0:9.07-28.el7 |
| Oracle Linux · 7 | ghostscript-cups | 0:9.07-28.el7 |
| Oracle Linux · 7 | ghostscript-devel | 0:9.07-28.el7 |
| Oracle Linux · 7 | ghostscript-doc | 0:9.07-28.el7 |
| Oracle Linux · 7 | ghostscript-gtk | 0:9.07-28.el7 |
Vulnerabilities 1
-
Unscored —
The mem_get_bits_rectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denia…