Summary
[9.07-31.el7_6.9]
- Related: #1667442 - CVE-2019-6116 - added missing parts of patch
[9.07-31.el7_6.8]
- Resolves: #1667442 - CVE-2019-6116 ghostscript: subroutines within
pseudo-operators must themselves be pseudo-operators
[9.07-31.el7_6.7]
- Resolves: #1665919 pdf2ps reports an error when reading from stdin
- Resolves: #1657333 - CVE-2018-16540 ghostscript: use-after-free in
copydevice handling (699661)
- Resolves: #1660569 - CVE-2018-19475 ghostscript: access bypass in
psi/zdevice2.c (700153)
- Resolves: #1660828 - CVE-2018-19476 ghostscript: access bypass in
psi/zicc.c
- Resolves: #1661278 - CVE-2018-19477 ghostscript: access bypass in
psi/zfjbig2.c (700168)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | ghostscript | 0:9.07-31.el7_6.9 |
| Oracle Linux · 7 | ghostscript-cups | 0:9.07-31.el7_6.9 |
| Oracle Linux · 7 | ghostscript-devel | 0:9.07-31.el7_6.9 |
| Oracle Linux · 7 | ghostscript-doc | 0:9.07-31.el7_6.9 |
| Oracle Linux · 7 | ghostscript-gtk | 0:9.07-31.el7_6.9 |
Vulnerabilities 5
-
Unscored —
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files to the builtin PDF14 converter co…
-
Unscored —
psi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions becaus…
-
Unscored —
psi/zicc.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of…
-
Unscored —
psi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because…
-
Unscored —
In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to…