ELSA-2018-3650

ELSA-2018-3650 - ghostscript security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2018-11-26

Description

[9.07-31.el7_6.1]
- Remove as many non-standard operators as possible to make the codebase
closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
checker (699659)
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
type checking (699660)

Related CVEs

CVE-2018-15909

CVE-2018-16511

CVE-2018-15908

CVE-2018-16539

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	ghostscript-9.07-31.el7_6.1.src.rpm	d554e0588827056be2b2b09e4a8cc088858e20c67c8422940dda5010d03db5f6	ELSA-2024-4549	ol7_aarch64_latest
	ghostscript-9.07-31.el7_6.1.src.rpm	d554e0588827056be2b2b09e4a8cc088858e20c67c8422940dda5010d03db5f6	ELSA-2024-4549	ol7_aarch64_optional_latest
	ghostscript-9.07-31.el7_6.1.aarch64.rpm	44e249743a906aa4644b31d738327fbb3200285227bfb52f89cdd22b8df09015	ELSA-2024-4549	ol7_aarch64_latest
	ghostscript-cups-9.07-31.el7_6.1.aarch64.rpm	eabcbcd62ad17bda4ce78de4dea1da36405aac361bf050cb73b4d6b0a06e75f3	ELSA-2024-4549	ol7_aarch64_latest
	ghostscript-devel-9.07-31.el7_6.1.aarch64.rpm	26f03606c3e2a4e2ff0bc5a2893981d7d49721d0ff7859c7def9b682ed326032	ELSA-2019-1017	ol7_aarch64_optional_latest
	ghostscript-doc-9.07-31.el7_6.1.noarch.rpm	c6f1d1aa857d00d2bf1925124ea809a484378d69cefbadd6ad0d07ced1758fda	ELSA-2024-4549	ol7_aarch64_optional_latest
	ghostscript-gtk-9.07-31.el7_6.1.aarch64.rpm	b63e7bae4b557a0830b5be5fd712a90da63f94fdc9ca53f0721ed9f1df50d3ec	ELSA-2024-4549	ol7_aarch64_optional_latest
Oracle Linux 7 (x86_64)	ghostscript-9.07-31.el7_6.1.src.rpm	d554e0588827056be2b2b09e4a8cc088858e20c67c8422940dda5010d03db5f6	ELSA-2024-4549	ol7_x86_64_latest
	ghostscript-9.07-31.el7_6.1.src.rpm	d554e0588827056be2b2b09e4a8cc088858e20c67c8422940dda5010d03db5f6	ELSA-2024-4549	ol7_x86_64_optional_latest
	ghostscript-9.07-31.el7_6.1.src.rpm	d554e0588827056be2b2b09e4a8cc088858e20c67c8422940dda5010d03db5f6	ELSA-2024-4549	ol7_x86_64_u6_patch
	ghostscript-9.07-31.el7_6.1.i686.rpm	40a93382941c267c999d43a94a5eb92f596d1af1883e4de58677cc24e18fa131	ELSA-2024-4549	ol7_x86_64_latest
	ghostscript-9.07-31.el7_6.1.i686.rpm	40a93382941c267c999d43a94a5eb92f596d1af1883e4de58677cc24e18fa131	ELSA-2024-4549	ol7_x86_64_u6_patch
	ghostscript-9.07-31.el7_6.1.x86_64.rpm	c82029aea7f72055e91455a34b0210b1d8a535a1a4dec1b459e5e3cd1f16aa81	ELSA-2024-4549	ol7_x86_64_latest
	ghostscript-9.07-31.el7_6.1.x86_64.rpm	c82029aea7f72055e91455a34b0210b1d8a535a1a4dec1b459e5e3cd1f16aa81	ELSA-2024-4549	ol7_x86_64_u6_patch
	ghostscript-cups-9.07-31.el7_6.1.x86_64.rpm	c19abd26739545615dc8156092f61307d60eed13cc687e16c5a9a20721b23c92	ELSA-2024-4549	ol7_x86_64_latest
	ghostscript-cups-9.07-31.el7_6.1.x86_64.rpm	c19abd26739545615dc8156092f61307d60eed13cc687e16c5a9a20721b23c92	ELSA-2024-4549	ol7_x86_64_u6_patch
	ghostscript-devel-9.07-31.el7_6.1.i686.rpm	ad883feeceb7789dd71a87ea00a35766da95f3c4d81b1f17787d7608feb641db	ELSA-2019-1017	ol7_x86_64_optional_latest
	ghostscript-devel-9.07-31.el7_6.1.x86_64.rpm	e124e3a287795c5382267fa2d65733c4f5d2ae305b60190bdb3a5673a25b840e	ELSA-2019-1017	ol7_x86_64_optional_latest
	ghostscript-doc-9.07-31.el7_6.1.noarch.rpm	c6f1d1aa857d00d2bf1925124ea809a484378d69cefbadd6ad0d07ced1758fda	ELSA-2024-4549	ol7_x86_64_optional_latest
	ghostscript-gtk-9.07-31.el7_6.1.x86_64.rpm	abc1f2817ba821fb6d550f386654f3d59e9920ed271529e4c0dd56e459ba5008	ELSA-2024-4549	ol7_x86_64_optional_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team