Summary
[9.07-31.el7_6.10]
- Resolves: #1673915 - ghostscript: Regression: double comment chars
'%' in gs_init.ps leading to missing metadata
- Resolves: #1678171 - CVE-2019-3835 ghostscript: superexec operator
is available (700585)
- Resolves: #1680025 - CVE-2019-3838 ghostscript: forceput in DefineResource
is still accessible (700576)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | ghostscript | 0:9.07-31.el7_6.10 |
| Oracle Linux · 7 | ghostscript-cups | 0:9.07-31.el7_6.10 |
| Oracle Linux · 7 | ghostscript-devel | 0:9.07-31.el7_6.10 |
| Oracle Linux · 7 | ghostscript-doc | 0:9.07-31.el7_6.10 |
| Oracle Linux · 7 | ghostscript-gtk | 0:9.07-31.el7_6.10 |
Vulnerabilities 2
-
High 7.3
It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27. A special…
-
High 7.3
It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27. A…