High ELSA-2018-2918 4 CVEs

Important: ghostscript security update (Oracle Linux 7)

Published Oct 15, 2018 · Updated Oct 15, 2018

Ecosystem: Oracle Linux

Summary

[9.07-29.el7_5.2]
- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1629842)

[9.07-29.el7_5.1]
- Added security fixes for:
- CVE-2018-16509 (bug #1621156)
- CVE-2018-15910 (bug #1621157)
- CVE-2018-16542 (bug #1621380)

[9.07-29]
- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 7	ghostscript	0:9.07-29.el7_5.2
Oracle Linux · 7	ghostscript-cups	0:9.07-29.el7_5.2
Oracle Linux · 7	ghostscript-devel	0:9.07-29.el7_5.2
Oracle Linux · 7	ghostscript-doc	0:9.07-29.el7_5.2
Oracle Linux · 7	ghostscript-gtk	0:9.07-29.el7_5.2

Vulnerabilities 4

Unscored —

CVE-2018-10194

The set_text_distance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.…

wireshark ghostscript ghostscript ghostscript Debian Ubuntu Alpine

Apr 18, 2018
Unscored —

CVE-2018-15910

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the…

ghostscript ghostscript ghostscript Debian Ubuntu Alpine

Aug 27, 2018
Unscored —

CVE-2018-16509 Public exploit EPSS 92%

An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handli…

ghostscript ghostscript Debian Ubuntu

Sep 5, 2018
Unscored —

CVE-2018-16542

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use insufficient interprete…

ghostscript ghostscript Debian Ubuntu

Sep 5, 2018