Oracle alert ELSA-2019-2586 (ghostscript)
| From: | Errata Announcements for Oracle Linux <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2019-2586 Important: Oracle Linux 7 ghostscript security update (aarch64) | |
| Date: | Tue, 3 Sep 2019 05:19:15 -0700 | |
| Message-ID: | <135aac00-0aad-e635-a867-1ad967463e9d@oracle.com> |
Oracle Linux Security Advisory ELSA-2019-2586 http://linux.oracle.com/errata/ELSA-2019-2586.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: aarch64: ghostscript-9.25-2.el7_7.2.aarch64.rpm ghostscript-cups-9.25-2.el7_7.2.aarch64.rpm ghostscript-doc-9.25-2.el7_7.2.noarch.rpm ghostscript-gtk-9.25-2.el7_7.2.aarch64.rpm libgs-9.25-2.el7_7.2.aarch64.rpm libgs-devel-9.25-2.el7_7.2.aarch64.rpm SRPMS: http://oss.oracle.com/ol7/SRPMS-updates/ghostscript-9.25-... Description of changes: [9.25-2.2] - Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445) - Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444) - Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443) - Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450) [9.25-2.1] - Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394) _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata