ELSA-2019-2591

ELSA-2019-2591 - ghostscript security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2019-09-06

Description

[9.25-2.3]
- Resolves: #1744010 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
- Resolves: #1744014 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
- Resolves: #1744005 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
- Resolves: #1744230 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)

Related CVEs

CVE-2019-14811

CVE-2019-14812

CVE-2019-14817

CVE-2019-14813

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 8 (aarch64)	ghostscript-9.25-2.el8_0.3.src.rpm	7c1f3692124ff8ea36b0fca13ef68f6a	-
	ghostscript-9.25-2.el8_0.3.aarch64.rpm	5b1e9e7f1560beb084a3009a683020f6	-
	ghostscript-doc-9.25-2.el8_0.3.noarch.rpm	ac500f001d7d1b0daf85291c7af520ee	-
	ghostscript-tools-dvipdf-9.25-2.el8_0.3.aarch64.rpm	cd75ff576c02efa4bbffda904fac764e	-
	ghostscript-tools-fonts-9.25-2.el8_0.3.aarch64.rpm	497d227c39afe3db69a6fbeeaac694f0	-
	ghostscript-tools-printing-9.25-2.el8_0.3.aarch64.rpm	0e30f21cccac4ab8f7f47520d3fc4fc5	-
	ghostscript-x11-9.25-2.el8_0.3.aarch64.rpm	3dc2644b679aa44f3d3c60c2fc7f8f04	-
	libgs-9.25-2.el8_0.3.aarch64.rpm	97fc15247e86a4d13efc92792ab3772b	-
	libgs-devel-9.25-2.el8_0.3.aarch64.rpm	a147b17292f21e33bd95c50a883c37b1	-
Oracle Linux 8 (x86_64)	ghostscript-9.25-2.el8_0.3.src.rpm	7c1f3692124ff8ea36b0fca13ef68f6a	-
	ghostscript-9.25-2.el8_0.3.x86_64.rpm	7d8ea403a6b1b6c7dd9c6b1f527a2569	-
	ghostscript-doc-9.25-2.el8_0.3.noarch.rpm	ac500f001d7d1b0daf85291c7af520ee	-
	ghostscript-tools-dvipdf-9.25-2.el8_0.3.x86_64.rpm	3c37b0ac42fb901de3f768756685d9df	-
	ghostscript-tools-fonts-9.25-2.el8_0.3.x86_64.rpm	b721b2680c48cd6339dfbe3345229cdf	-
	ghostscript-tools-printing-9.25-2.el8_0.3.x86_64.rpm	b374e19c7c44e41cd1b73078f00c9f00	-
	ghostscript-x11-9.25-2.el8_0.3.x86_64.rpm	a6034256e63f2612a938b96798354ec8	-
	libgs-9.25-2.el8_0.3.i686.rpm	b53555ee51f7b3d10bca00e5c784958a	-
	libgs-9.25-2.el8_0.3.x86_64.rpm	1b1f5d9ec7c890236d8721605a686096	-
	libgs-devel-9.25-2.el8_0.3.i686.rpm	550bb02dcc5e8336b72783bae7ded04d	-
	libgs-devel-9.25-2.el8_0.3.x86_64.rpm	247d8e29dce3f6388bfe3f6dfddc2133	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team