Описание
Security update for ghostscript
ghostscript was updated to fix one security issue and one bug.
The following vulnerability was fixed:
- CVE-2015-3228: Specially crafted ps files could have caused an out of bound read/write due to an integer overflow, causing a segfault in the application or having unspecified further impact.
Also a non security bug was fixed:
- fix a crash in mutex handling (bsc#963017)
This update was imported from the SUSE:SLE-12:Update update project.
Список пакетов
openSUSE Leap 42.1
ghostscript-9.15-5.1
ghostscript-devel-9.15-5.1
ghostscript-mini-9.15-5.1
ghostscript-mini-devel-9.15-5.1
ghostscript-x11-9.15-5.1
Ссылки
- E-Mail link for openSUSE-SU-2016:0951-1
- SUSE Security Ratings
Описание
Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to cause a denial of service (crash) via a crafted Postscript (ps) file, as demonstrated by using the ps2pdf command, which triggers an out-of-bounds read or write.
Затронутые продукты
openSUSE Leap 42.1:ghostscript-9.15-5.1
openSUSE Leap 42.1:ghostscript-devel-9.15-5.1
openSUSE Leap 42.1:ghostscript-mini-9.15-5.1
openSUSE Leap 42.1:ghostscript-mini-devel-9.15-5.1
Ссылки
- CVE-2015-3228
- SUSE Bug 939342