Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:2817-1

Опубликовано: 16 нояб. 2016
Источник: suse-cvrf

Описание

Security update for ghostscript

This update for ghostscript fixes the following issues:

  • bsc#1006592: Fix a regression introduced in CVE-2013-5653 by which ps files couldn't be opened in okular/evince (kde#371887).

Список пакетов

SUSE Linux Enterprise Desktop 12 SP1
ghostscript-9.15-17.2
ghostscript-x11-9.15-17.2
SUSE Linux Enterprise Desktop 12 SP2
ghostscript-9.15-17.2
ghostscript-x11-9.15-17.2
SUSE Linux Enterprise Server 12 SP1
ghostscript-9.15-17.2
ghostscript-x11-9.15-17.2
SUSE Linux Enterprise Server 12 SP2
ghostscript-9.15-17.2
ghostscript-x11-9.15-17.2
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
ghostscript-9.15-17.2
ghostscript-x11-9.15-17.2
SUSE Linux Enterprise Server for SAP Applications 12 SP1
ghostscript-9.15-17.2
ghostscript-x11-9.15-17.2
SUSE Linux Enterprise Server for SAP Applications 12 SP2
ghostscript-9.15-17.2
ghostscript-x11-9.15-17.2
SUSE Linux Enterprise Software Development Kit 12 SP1
ghostscript-devel-9.15-17.2
SUSE Linux Enterprise Software Development Kit 12 SP2
ghostscript-devel-9.15-17.2

Ссылки

Описание

The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript file.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:ghostscript-9.15-17.2
SUSE Linux Enterprise Desktop 12 SP1:ghostscript-x11-9.15-17.2
SUSE Linux Enterprise Desktop 12 SP2:ghostscript-9.15-17.2
SUSE Linux Enterprise Desktop 12 SP2:ghostscript-x11-9.15-17.2
Ссылки