Fixed packages 24
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 7 enterprise_linux:7::client | ghostscript | 0:9.07-31.el7_6.6 |
| Red Hat · RHEL 7 enterprise_linux:7::client | ghostscript-cups | 0:9.07-31.el7_6.6 |
| Red Hat · RHEL 7 enterprise_linux:7::client | ghostscript-debuginfo | 0:9.07-31.el7_6.6 |
| Red Hat · RHEL 7 enterprise_linux:7::client | ghostscript-devel | 0:9.07-31.el7_6.6 |
| Red Hat · RHEL 7 enterprise_linux:7::client | ghostscript-doc | 0:9.07-31.el7_6.6 |
| Red Hat · RHEL 7 enterprise_linux:7::client | ghostscript-gtk | 0:9.07-31.el7_6.6 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | ghostscript | 0:9.07-31.el7_6.6 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | ghostscript-cups | 0:9.07-31.el7_6.6 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | ghostscript-debuginfo | 0:9.07-31.el7_6.6 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | ghostscript-devel | 0:9.07-31.el7_6.6 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | ghostscript-doc | 0:9.07-31.el7_6.6 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | ghostscript-gtk | 0:9.07-31.el7_6.6 |
| Red Hat · RHEL 7 enterprise_linux:7::server | ghostscript | 0:9.07-31.el7_6.6 |
| Red Hat · RHEL 7 enterprise_linux:7::server | ghostscript-cups | 0:9.07-31.el7_6.6 |
| Red Hat · RHEL 7 enterprise_linux:7::server | ghostscript-debuginfo | 0:9.07-31.el7_6.6 |
| Red Hat · RHEL 7 enterprise_linux:7::server | ghostscript-devel | 0:9.07-31.el7_6.6 |
| Red Hat · RHEL 7 enterprise_linux:7::server | ghostscript-doc | 0:9.07-31.el7_6.6 |
| Red Hat · RHEL 7 enterprise_linux:7::server | ghostscript-gtk | 0:9.07-31.el7_6.6 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | ghostscript | 0:9.07-31.el7_6.6 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | ghostscript-cups | 0:9.07-31.el7_6.6 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | ghostscript-debuginfo | 0:9.07-31.el7_6.6 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | ghostscript-devel | 0:9.07-31.el7_6.6 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | ghostscript-doc | 0:9.07-31.el7_6.6 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | ghostscript-gtk | 0:9.07-31.el7_6.6 |
Vulnerabilities 9
-
Unscored —
In Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could use uninitialized memo…
-
Unscored —
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect free logic in…
-
Unscored —
An issue was discovered in Artifex Ghostscript before 9.25. Incorrect "restoration of privilege" checking when running …
-
Unscored —
Artifex Ghostscript before 9.25 allowed a user-writable error exception table, which could be used by remote attackers …
-
Unscored —CVE-2018-17961 Public exploit
Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving er…
-
Unscored —
Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operator…
-
Unscored —CVE-2018-18284 EPSS 16%
Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving th…
-
Unscored —
In Artifex Ghostscript through 9.25, the setpattern operator did not properly validate certain types. A specially craft…
-
Unscored —
An issue was discovered in Artifex Ghostscript before 9.26. LockSafetyParams is not checked correctly if another device…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1625832
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1625846
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1627959
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1632471
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1642578
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1642584
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1642940
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1652583
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1655599
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1657822
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3834.json
-
report
https://access.redhat.com/security/cve/CVE-2018-15911
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-15911
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-15911
-
advisory
https://www.kb.cert.org/vuls/id/332928
-
report
https://access.redhat.com/security/cve/CVE-2018-16541
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-16541
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-16541
-
article
https://www.artifex.com/news/ghostscript-security-resolved/
-
report
https://access.redhat.com/security/cve/CVE-2018-16802
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-16802
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-16802
-
report
https://access.redhat.com/security/cve/CVE-2018-17183
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-17183
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-17183
-
report
https://access.redhat.com/security/cve/CVE-2018-17961
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-17961
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-17961
-
report
https://access.redhat.com/security/cve/CVE-2018-18073
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-18073
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-18073
-
report
https://access.redhat.com/security/cve/CVE-2018-18284
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-18284
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-18284
-
report
https://access.redhat.com/security/cve/CVE-2018-19134
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-19134
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-19134
-
report
https://access.redhat.com/security/cve/CVE-2018-19409