Fixed packages 24
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 7 enterprise_linux:7::client | ghostscript | 0:9.07-31.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::client | ghostscript-cups | 0:9.07-31.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::client | ghostscript-debuginfo | 0:9.07-31.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::client | ghostscript-devel | 0:9.07-31.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::client | ghostscript-doc | 0:9.07-31.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::client | ghostscript-gtk | 0:9.07-31.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | ghostscript | 0:9.07-31.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | ghostscript-cups | 0:9.07-31.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | ghostscript-debuginfo | 0:9.07-31.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | ghostscript-devel | 0:9.07-31.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | ghostscript-doc | 0:9.07-31.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | ghostscript-gtk | 0:9.07-31.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::server | ghostscript | 0:9.07-31.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::server | ghostscript-cups | 0:9.07-31.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::server | ghostscript-debuginfo | 0:9.07-31.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::server | ghostscript-devel | 0:9.07-31.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::server | ghostscript-doc | 0:9.07-31.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::server | ghostscript-gtk | 0:9.07-31.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | ghostscript | 0:9.07-31.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | ghostscript-cups | 0:9.07-31.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | ghostscript-debuginfo | 0:9.07-31.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | ghostscript-devel | 0:9.07-31.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | ghostscript-doc | 0:9.07-31.el7_6.1 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | ghostscript-gtk | 0:9.07-31.el7_6.1 |
Vulnerabilities 4
-
Unscored —
In Artifex Ghostscript 9.23 before 2018-08-23, attackers are able to supply malicious PostScript files to bypass .tempf…
-
Unscored —
In Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could be used by attackers a…
-
Unscored —
An issue was discovered in Artifex Ghostscript before 9.24. A type confusion in "ztype" could be used by remote attacke…
-
Unscored —
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect access checki…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1619756
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1621359
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1621361
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1625839
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3650.json
-
report
https://access.redhat.com/security/cve/CVE-2018-15908
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-15908
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-15908
-
article
http://seclists.org/oss-sec/2018/q3/142
-
report
https://access.redhat.com/security/cve/CVE-2018-15909
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-15909
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-15909
-
report
https://access.redhat.com/security/cve/CVE-2018-16511
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-16511
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-16511
-
report
https://access.redhat.com/security/cve/CVE-2018-16539
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-16539
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-16539
-
article
https://www.artifex.com/news/ghostscript-security-resolved/
-
advisory
https://www.kb.cert.org/vuls/id/332928