Red Hat Security AdvisoryRHSA-2017:1230
ghostscript security update
Released 2017-05-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) ghostscript-9.07-20.el7_3.5, ghostscript-cups-9.07-20.el7_3.5
- Red Hat Enterprise Linux Client Optional (v. 7) ghostscript-devel-9.07-20.el7_3.5, ghostscript-doc-9.07-20.el7_3.5, ghostscript-gtk-9.07-20.el7_3.5
- Red Hat Enterprise Linux ComputeNode (v. 7) ghostscript-9.07-20.el7_3.5, ghostscript-cups-9.07-20.el7_3.5
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) ghostscript-devel-9.07-20.el7_3.5, ghostscript-doc-9.07-20.el7_3.5, ghostscript-gtk-9.07-20.el7_3.5
- Red Hat Enterprise Linux Desktop (v. 6) ghostscript-8.70-23.el6_9.2
- Red Hat Enterprise Linux Desktop Optional (v. 6) ghostscript-devel-8.70-23.el6_9.2, ghostscript-doc-8.70-23.el6_9.2, ghostscript-gtk-8.70-23.el6_9.2
- Red Hat Enterprise Linux HPC Node (v. 6) ghostscript-8.70-23.el6_9.2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) ghostscript-devel-8.70-23.el6_9.2, ghostscript-doc-8.70-23.el6_9.2, ghostscript-gtk-8.70-23.el6_9.2
- Red Hat Enterprise Linux Server (v. 6) ghostscript-8.70-23.el6_9.2, ghostscript-8.70-23.el6_9.2.ppc
- Red Hat Enterprise Linux Server (v. 7) ghostscript-9.07-20.el7_3.5, ghostscript-9.07-20.el7_3.5.ppc, ghostscript-cups-9.07-20.el7_3.5
- Red Hat Enterprise Linux Server Optional (v. 6) ghostscript-devel-8.70-23.el6_9.2, ghostscript-devel-8.70-23.el6_9.2.ppc, ghostscript-doc-8.70-23.el6_9.2 +1
- Red Hat Enterprise Linux Server Optional (v. 7) ghostscript-devel-9.07-20.el7_3.5, ghostscript-devel-9.07-20.el7_3.5.ppc, ghostscript-doc-9.07-20.el7_3.5 +1
- Red Hat Enterprise Linux Workstation (v. 6) ghostscript-8.70-23.el6_9.2
- Red Hat Enterprise Linux Workstation (v. 7) ghostscript-9.07-20.el7_3.5, ghostscript-cups-9.07-20.el7_3.5
- Red Hat Enterprise Linux Workstation Optional (v. 6) ghostscript-devel-8.70-23.el6_9.2, ghostscript-doc-8.70-23.el6_9.2, ghostscript-gtk-8.70-23.el6_9.2
- Red Hat Enterprise Linux Workstation Optional (v. 7) ghostscript-devel-9.07-20.el7_3.5, ghostscript-doc-9.07-20.el7_3.5, ghostscript-gtk-9.07-20.el7_3.5
Fixes 1 record
Priority CRITICAL 93KEV
Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile (%pipe%" substring in a crafted .eps document that is an input to the gs program…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.96968 · Published 2017-04-27 · Partial fix CWE-843
