Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2017-0013

Опубликовано: 04 янв. 2017
Источник: oracle-oval
Платформа: Oracle Linux 7

Описание

ELSA-2017-0013: ghostscript security update (MODERATE)

[9.07-20_1]

  • Added security fixes for:
    • CVE-2013-5653 (bug #1380327)
    • CVE-2016-7977 (bug #1380415)
    • CVE-2016-7978 (bug #1382300)
    • CVE-2016-7979 (bug #1382305)
    • CVE-2016-8602 (bug #1383940)

Обновленные пакеты

Oracle Linux 7

Oracle Linux x86_64

ghostscript

9.07-20.el7_3.1

ghostscript-cups

9.07-20.el7_3.1

ghostscript-devel

9.07-20.el7_3.1

ghostscript-doc

9.07-20.el7_3.1

ghostscript-gtk

9.07-20.el7_3.1

Связанные CVE

CVE-2016-7977
CVE-2016-7979
CVE-2016-8602
CVE-2016-7978
CVE-2013-5653

Ссылки на источники

Связанные уязвимости

oracle-oval логотип

ELSA-2017-0014

oracle-oval
больше 9 лет назад

ELSA-2017-0014: ghostscript security update (MODERATE)

suse-cvrf логотип

SUSE-SU-2016:2493-1

suse-cvrf
почти 10 лет назад

Security update for ghostscript-library

ubuntu логотип

CVE-2016-7977

CVSS3: 5.5
ubuntu
около 9 лет назад

Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently read arbitrary files via the use of the .libfile operator in a crafted postscript document.

redhat логотип

CVE-2016-7977

CVSS3: 6.2
redhat
почти 10 лет назад

Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently read arbitrary files via the use of the .libfile operator in a crafted postscript document.

nvd логотип

CVE-2016-7977

CVSS3: 5.5
nvd
около 9 лет назад

Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently read arbitrary files via the use of the .libfile operator in a crafted postscript document.