ELBA-2020-3945

ELBA-2020-3945 - ghostscript bug fix and enhancement update

Type:	BUG
Severity:	NA
Release Date:	2020-10-06

Description

[9.25-5]
- 1812284 - ghostscript fontconfig support broken when gs used with -dSAFER/-dPARANOIDSAFER

[9.25-4]
- 1769341 - CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys

[9.25-3]
- Resolves: #1737339 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)
- Resolves: #1744009 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744013 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744004 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744229 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)

Updated Packages

Release/Architecture

Filename

MD5sum

Superseded By Advisory

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team