ELSA-2018-3760

ELSA-2018-3760 - ghostscript security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2018-12-03

Description

[8.70-24.el6_10.2]
- It was found that the fix for CVE-2018-16509 was not complete, the missing
pieces added into ghostscript-CVE-2018-16509.patch

[8.70-24.el6_10.1]
- Resolves: #1641124 - CVE-2018-16509 ghostscript: /invalidaccess bypass after failed restore

[8.70-24]
- Added security fix for CVE-2017-8291 (bug #1446063)

Related CVEs

CVE-2018-16509

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	ghostscript-8.70-24.el6_10.2.src.rpm	bbb6263038f2d4ca71f69f61e51b523f	-
	ghostscript-8.70-24.el6_10.2.i686.rpm	1daea4f96cca691bf1fbd94e8eafd775	-
	ghostscript-devel-8.70-24.el6_10.2.i686.rpm	74d018e27b97e97a24cb30c50f7fa814	-
	ghostscript-doc-8.70-24.el6_10.2.i686.rpm	6f1b741d751b33d15ecf0132a70b94ce	-
	ghostscript-gtk-8.70-24.el6_10.2.i686.rpm	862fe72733b69c4802f90b73925cb593	-
Oracle Linux 6 (x86_64)	ghostscript-8.70-24.el6_10.2.src.rpm	bbb6263038f2d4ca71f69f61e51b523f	-
	ghostscript-8.70-24.el6_10.2.i686.rpm	1daea4f96cca691bf1fbd94e8eafd775	-
	ghostscript-8.70-24.el6_10.2.x86_64.rpm	98700ca88ae0e2518c17cfe2b8898203	-
	ghostscript-devel-8.70-24.el6_10.2.i686.rpm	74d018e27b97e97a24cb30c50f7fa814	-
	ghostscript-devel-8.70-24.el6_10.2.x86_64.rpm	9b6a4597f8cc767304346c57cd7ac378	-
	ghostscript-doc-8.70-24.el6_10.2.x86_64.rpm	6d1911a54e0c1931b3324ad2336031a7	-
	ghostscript-gtk-8.70-24.el6_10.2.x86_64.rpm	c5d7c2415a3d1054dd7c1131f659f692	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team