High ELSA-2019-2465 1 CVE

Important: ghostscript security update (Oracle Linux 8)

Published Aug 13, 2019 · Updated Aug 13, 2019

Ecosystem: Oracle Linux

Summary

[9.25-2.2]
- Resolves: #1737336 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)

Fixed packages 8

Release	Package	Fixed in
Oracle Linux · 8	ghostscript	0:9.25-2.el8_0.2
Oracle Linux · 8	ghostscript-doc	0:9.25-2.el8_0.2
Oracle Linux · 8	ghostscript-tools-dvipdf	0:9.25-2.el8_0.2
Oracle Linux · 8	ghostscript-tools-fonts	0:9.25-2.el8_0.2
Oracle Linux · 8	ghostscript-tools-printing	0:9.25-2.el8_0.2
Oracle Linux · 8	ghostscript-x11	0:9.25-2.el8_0.2
Oracle Linux · 8	libgs	0:9.25-2.el8_0.2
Oracle Linux · 8	libgs-devel	0:9.25-2.el8_0.2

Vulnerabilities 1

High 7.3

CVE-2019-10216

In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling sc…

Ghostscript ghostscript ghostscript ghostscript Debian Ubuntu Alpine

Nov 27, 2019