ELSA-2019-0633

ELSA-2019-0633 - ghostscript security and bug fix update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2019-03-21

Description

[9.07-31.el7_6.10]
- Resolves: #1673915 - ghostscript: Regression: double comment chars
'%' in gs_init.ps leading to missing metadata
- Resolves: #1678171 - CVE-2019-3835 ghostscript: superexec operator
is available (700585)
- Resolves: #1680025 - CVE-2019-3838 ghostscript: forceput in DefineResource
is still accessible (700576)

Related CVEs

CVE-2019-3835

CVE-2019-3838

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	ghostscript-9.07-31.el7_6.10.src.rpm	e1b8cbb2d04f7c8ee92146ff618ef7fb	ELBA-2020-3945
	ghostscript-9.07-31.el7_6.10.aarch64.rpm	a22a25ea1aac9714112b24c53bb19285	ELBA-2020-3945
	ghostscript-cups-9.07-31.el7_6.10.aarch64.rpm	2770dcdbee85e9c43aa60cd66853ad9d	ELBA-2020-3945
	ghostscript-devel-9.07-31.el7_6.10.aarch64.rpm	fe29d7b6c72fcd77844a22f2938b779c	ELSA-2019-1017
	ghostscript-doc-9.07-31.el7_6.10.noarch.rpm	6caf76d90d1b34b6369e5d434021ec53	ELBA-2020-3945
	ghostscript-gtk-9.07-31.el7_6.10.aarch64.rpm	3fad29ad1fbb1f53d703488fe2f73ead	ELBA-2020-3945
Oracle Linux 7 (x86_64)	ghostscript-9.07-31.el7_6.10.src.rpm	e1b8cbb2d04f7c8ee92146ff618ef7fb	ELBA-2020-3945
	ghostscript-9.07-31.el7_6.10.i686.rpm	da1fe79381e5e39b3f95b03ee5e16c03	ELBA-2020-3945
	ghostscript-9.07-31.el7_6.10.x86_64.rpm	a3e8c2354bafe31a1f67d8625d307b9d	ELBA-2020-3945
	ghostscript-cups-9.07-31.el7_6.10.x86_64.rpm	1a64e5763b61d9cdc6220b250f9fe99d	ELBA-2020-3945
	ghostscript-devel-9.07-31.el7_6.10.i686.rpm	0b1b0fd0856e2314870673c203067b87	ELSA-2019-1017
	ghostscript-devel-9.07-31.el7_6.10.x86_64.rpm	475257a4848173cf3938f55b060eb513	ELSA-2019-1017
	ghostscript-doc-9.07-31.el7_6.10.noarch.rpm	6caf76d90d1b34b6369e5d434021ec53	ELBA-2020-3945
	ghostscript-gtk-9.07-31.el7_6.10.x86_64.rpm	43085723128bdbbc6f6163397d533d92	ELBA-2020-3945

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team