High ELSA-2019-2462 1 CVE

Important: ghostscript security update (Oracle Linux 7)

Published Aug 16, 2019 · Updated Aug 16, 2019

Ecosystem: Oracle Linux

Summary

[9.25-2.1]
- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)

Fixed packages 6

Release	Package	Fixed in
Oracle Linux · 7	ghostscript	0:9.25-2.el7_7.1
Oracle Linux · 7	ghostscript-cups	0:9.25-2.el7_7.1
Oracle Linux · 7	ghostscript-doc	0:9.25-2.el7_7.1
Oracle Linux · 7	ghostscript-gtk	0:9.25-2.el7_7.1
Oracle Linux · 7	libgs	0:9.25-2.el7_7.1
Oracle Linux · 7	libgs-devel	0:9.25-2.el7_7.1

Vulnerabilities 1

High 7.3

CVE-2019-10216

In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling sc…

Ghostscript ghostscript ghostscript ghostscript Debian Ubuntu Alpine

Nov 27, 2019