ELSA-2019-2586

ELSA-2019-2586 - ghostscript security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2019-09-02

Description

[9.25-2.2]
- Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)

[9.25-2.1]
- Resolves: #1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)

Related CVEs

CVE-2019-14817

CVE-2019-14811

CVE-2019-14813

CVE-2019-14812

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	ghostscript-9.25-2.el7_7.2.src.rpm	f404d5d6a374aa334a5b6925a0f9f7fcc838b8086a721d3e174c3a8b9dfe3c91	ELSA-2024-4549	ol7_aarch64_latest
	ghostscript-9.25-2.el7_7.2.src.rpm	f404d5d6a374aa334a5b6925a0f9f7fcc838b8086a721d3e174c3a8b9dfe3c91	ELSA-2024-4549	ol7_aarch64_optional_latest
	ghostscript-9.25-2.el7_7.2.src.rpm	f404d5d6a374aa334a5b6925a0f9f7fcc838b8086a721d3e174c3a8b9dfe3c91	ELSA-2024-4549	ol7_aarch64_u7_patch
	ghostscript-9.25-2.el7_7.2.aarch64.rpm	d8c7e22a544b272f7f84165ad0a0509703d525cce9913b65a68ad55a1e7f303f	ELSA-2024-4549	ol7_aarch64_latest
	ghostscript-9.25-2.el7_7.2.aarch64.rpm	d8c7e22a544b272f7f84165ad0a0509703d525cce9913b65a68ad55a1e7f303f	ELSA-2024-4549	ol7_aarch64_u7_patch
	ghostscript-cups-9.25-2.el7_7.2.aarch64.rpm	bc00184af17ea79a5a032c624a09d24a619138adcfdf9344b33f979fa40d3329	ELSA-2024-4549	ol7_aarch64_latest
	ghostscript-cups-9.25-2.el7_7.2.aarch64.rpm	bc00184af17ea79a5a032c624a09d24a619138adcfdf9344b33f979fa40d3329	ELSA-2024-4549	ol7_aarch64_u7_patch
	ghostscript-doc-9.25-2.el7_7.2.noarch.rpm	ea71b57dd75d91839d72854d633735de45f3095db848a28935fe0aabee46b3b6	ELSA-2024-4549	ol7_aarch64_optional_latest
	ghostscript-gtk-9.25-2.el7_7.2.aarch64.rpm	fda8f3b396acef4c9d348c64bde6ccb8bd535027fc287ec017ac5a3e83fad2c8	ELSA-2024-4549	ol7_aarch64_optional_latest
	libgs-9.25-2.el7_7.2.aarch64.rpm	45ba12a861a4fc2c94f70bee3e892024f18643c6e1e2e53104c77da3761ffab6	ELSA-2024-4549	ol7_aarch64_latest
	libgs-9.25-2.el7_7.2.aarch64.rpm	45ba12a861a4fc2c94f70bee3e892024f18643c6e1e2e53104c77da3761ffab6	ELSA-2024-4549	ol7_aarch64_u7_patch
	libgs-devel-9.25-2.el7_7.2.aarch64.rpm	e0507c214b2662f5bec5e3978dac3fbc4213f4e02ede067a44aa6024bff05766	ELSA-2024-4549	ol7_aarch64_optional_latest
Oracle Linux 7 (x86_64)	ghostscript-9.25-2.el7_7.2.src.rpm	f404d5d6a374aa334a5b6925a0f9f7fcc838b8086a721d3e174c3a8b9dfe3c91	ELSA-2024-4549	ol7_x86_64_latest
	ghostscript-9.25-2.el7_7.2.src.rpm	f404d5d6a374aa334a5b6925a0f9f7fcc838b8086a721d3e174c3a8b9dfe3c91	ELSA-2024-4549	ol7_x86_64_optional_latest
	ghostscript-9.25-2.el7_7.2.src.rpm	f404d5d6a374aa334a5b6925a0f9f7fcc838b8086a721d3e174c3a8b9dfe3c91	ELSA-2024-4549	ol7_x86_64_u7_patch
	ghostscript-9.25-2.el7_7.2.i686.rpm	b7d2e913f7ab5b5845a1db38951844570da23f45bf7f074046930377525eb5ef	ELSA-2024-4549	ol7_x86_64_latest
	ghostscript-9.25-2.el7_7.2.i686.rpm	b7d2e913f7ab5b5845a1db38951844570da23f45bf7f074046930377525eb5ef	ELSA-2024-4549	ol7_x86_64_u7_patch
	ghostscript-9.25-2.el7_7.2.x86_64.rpm	ad8656148230e354e69dffcf322a0926b70fee9b90f68966a2c89fd07748cd51	ELSA-2024-4549	ol7_x86_64_latest
	ghostscript-9.25-2.el7_7.2.x86_64.rpm	ad8656148230e354e69dffcf322a0926b70fee9b90f68966a2c89fd07748cd51	ELSA-2024-4549	ol7_x86_64_u7_patch
	ghostscript-cups-9.25-2.el7_7.2.x86_64.rpm	c7cadced79416716737b07e658366f833b7ec918c7927761c1c4a22c842df432	ELSA-2024-4549	ol7_x86_64_latest
	ghostscript-cups-9.25-2.el7_7.2.x86_64.rpm	c7cadced79416716737b07e658366f833b7ec918c7927761c1c4a22c842df432	ELSA-2024-4549	ol7_x86_64_u7_patch
	ghostscript-doc-9.25-2.el7_7.2.noarch.rpm	ea71b57dd75d91839d72854d633735de45f3095db848a28935fe0aabee46b3b6	ELSA-2024-4549	ol7_x86_64_optional_latest
	ghostscript-gtk-9.25-2.el7_7.2.x86_64.rpm	fd61fb978b5d2017bdd03f4ff44184f4034d33f31642e33872e98dabf2c4c960	ELSA-2024-4549	ol7_x86_64_optional_latest
	libgs-9.25-2.el7_7.2.i686.rpm	5088d87ece3dc50e25a36b0c51ae29b92498b406c516aa150b6c391a05ee033b	ELSA-2024-4549	ol7_x86_64_latest
	libgs-9.25-2.el7_7.2.i686.rpm	5088d87ece3dc50e25a36b0c51ae29b92498b406c516aa150b6c391a05ee033b	ELSA-2024-4549	ol7_x86_64_u7_patch
	libgs-9.25-2.el7_7.2.x86_64.rpm	8ae90b14d48f848be1d03f9818699db25f87b29c06d6eec8a8755e29628cdefc	ELSA-2024-4549	ol7_x86_64_latest
	libgs-9.25-2.el7_7.2.x86_64.rpm	8ae90b14d48f848be1d03f9818699db25f87b29c06d6eec8a8755e29628cdefc	ELSA-2024-4549	ol7_x86_64_u7_patch
	libgs-devel-9.25-2.el7_7.2.i686.rpm	9a947ef96b9cd6ecdbb4657bc4123c92a1f770606fbd9f7026f5b67bb8e993db	ELSA-2024-4549	ol7_x86_64_optional_latest
	libgs-devel-9.25-2.el7_7.2.x86_64.rpm	9e01a13d5cfeb2c48d883d3cb15ac9dbe9753d32c356df7b0560eb672df90d82	ELSA-2024-4549	ol7_x86_64_optional_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team