ELSA-2012-0096

ELSA-2012-0096 - ghostscript security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2012-02-02

Description

[7.07-33.13]
- Applied patch to prevent null pointer dereference (CVE-2010-4054,
bug #646086).

[7.07-33.12]
- Backported patch to avoid reading initialization files from CWD
(CVE-2010-2055, bug #599564).

Related CVEs

CVE-2010-4054

CVE-2010-4820

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 4 (i386)	ghostscript-7.07-33.13.el4.src.rpm	8e1911d9cfdfbf17c38e99ec7fc6cbf3	-
	ghostscript-7.07-33.13.el4.i386.rpm	1ef0a956379d0f93b31ce7dcf921a84e	-
	ghostscript-devel-7.07-33.13.el4.i386.rpm	50ce4d0503cbcb7c7f96f7d3556f2392	-
	ghostscript-gtk-7.07-33.13.el4.i386.rpm	fa894a7fc6075401002483242d5ea4ce	-
Oracle Linux 4 (ia64)	ghostscript-7.07-33.13.el4.src.rpm	8e1911d9cfdfbf17c38e99ec7fc6cbf3	-
	ghostscript-7.07-33.13.el4.i386.rpm	1ef0a956379d0f93b31ce7dcf921a84e	-
	ghostscript-7.07-33.13.el4.ia64.rpm	0aec098329929500997a319f2d4e3642	-
	ghostscript-devel-7.07-33.13.el4.ia64.rpm	fbceea2a45f2461376a83b43005c6d6d	-
	ghostscript-gtk-7.07-33.13.el4.ia64.rpm	367e8040425c2a85ad1ae36e20c93551	-
Oracle Linux 4 (x86_64)	ghostscript-7.07-33.13.el4.src.rpm	8e1911d9cfdfbf17c38e99ec7fc6cbf3	-
	ghostscript-7.07-33.13.el4.i386.rpm	1ef0a956379d0f93b31ce7dcf921a84e	-
	ghostscript-7.07-33.13.el4.x86_64.rpm	d55bf1872bd96acc21e7d2401cf82e33	-
	ghostscript-devel-7.07-33.13.el4.x86_64.rpm	26e5f4552327780de8289054f7b9fb49	-
	ghostscript-gtk-7.07-33.13.el4.x86_64.rpm	dca4bd2f5a814b7e68b5a8a6a9c29bb5	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team