Описание
Security update for ghostscript
This update for ghostscript to version 9.26a fixes the following issues:
Security issue fixed:
- CVE-2019-6116: subroutines within pseudo-operators must themselves be pseudo-operators (bsc#1122319)
Список пакетов
SUSE Linux Enterprise Server for SAP Applications 12 SP1
ghostscript-9.26a-23.19.1
ghostscript-x11-9.26a-23.19.1
libspectre1-0.2.7-12.6.1
Ссылки
- Link for SUSE-SU-2019:0144-2
- E-Mail link for SUSE-SU-2019:0144-2
- SUSE Security Ratings
- SUSE Bug 1122319
- SUSE CVE CVE-2019-6116 page
Описание
In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution.
Затронутые продукты
SUSE Linux Enterprise Server for SAP Applications 12 SP1:ghostscript-9.26a-23.19.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1:ghostscript-x11-9.26a-23.19.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1:libspectre1-0.2.7-12.6.1
Ссылки
- CVE-2019-6116
- SUSE Bug 1122319
- SUSE Bug 1129186
- SUSE Bug 1134156