[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250108

 
 

909

 
 

196064

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SUSE-SU-2019:2478-1 -- SLES ghostscript, 9.27

ID: oval:org.secpod.oval:def:89003084Date: (C)2021-02-27   (M)2022-10-13
Class: PATCHFamily: unix




This update for ghostscript to 9.27 fixes the following issues: Security issues fixed: - CVE-2019-3835: Fixed an unauthorized file system access caused by an available superexec operator. - CVE-2019-3839: Fixed an unauthorized file system access caused by available privileged operators. - CVE-2019-12973: Fixed a denial-of-service vulnerability in the OpenJPEG function opj_t1_encode_cblks. - CVE-2019-14811: Fixed a safer mode bypass by .forceput exposure in .pdf_hook_DSC_Creator. - CVE-2019-14812: Fixed a safer mode bypass by .forceput exposure in setuserparams. - CVE-2019-14813: Fixed a safer mode bypass by .forceput exposure in setsystemparams. - CVE-2019-14817: Fixed a safer mode bypass by .forceput exposure in .pdfexectoken and other procedures

Platform:
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 12 SP4
Product:
ghostscript
Reference:
SUSE-SU-2019:2478-1
CVE-2019-12973
CVE-2019-14811
CVE-2019-14812
CVE-2019-14813
CVE-2019-14817
CVE-2019-3835
CVE-2019-3839
CVE    7
CVE-2019-14813
CVE-2019-14812
CVE-2019-14811
CVE-2019-14817
...
CPE    5
cpe:/a:ghostscript:ghostscript
cpe:/o:suse:suse_linux_enterprise_server:12:sp5
cpe:/o:suse:suse_linux_enterprise_server:12:sp3
cpe:/o:suse:suse_linux_enterprise_server:12:sp4
...

© SecPod Technologies