ghostscript security update

CentOS Errata and Security Advisory CESA-2019:0633 An update for ghostscript is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Oracle Linux 7 : ghostscript (ELSA-2019-0633)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-0633 advisory. - Resolves: 1678171 - CVE-2019-3835 ghostscript: superexec operator is available 700585 Tenable has extracted the preceding description block directly...

RHEL 7 : ghostscript (RHSA-2019:0633)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:0633 advisory. The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap...

Scientific Linux Security Update : ghostscript on SL7.x x86_64 (20190321)

Security Fixes : - ghostscript: superexec operator is available 700585 CVE-2019-3835 - ghostscript: forceput in DefineResource is still accessible 700576 CVE-2019-3838 Bug Fixes : - ghostscript: Regression: double comment chars '%%' in gsinit.ps leading to missing metadata C Tenable Network...

SUSE SLED15 / SLES15 Security Update : ghostscript (SUSE-SU-2019:0718-1)

This update for ghostscript fixes the following issue : Security issue fixed : CVE-2019-3838: Fixed a vulnerability which made forceput operator in DefineResource to be still accessible which could allow access to file system outside of the constraints of -dSAFER bsc1129186. Note that Tenable...

SUSE SLED12 / SLES12 Security Update : ghostscript (SUSE-SU-2019:0719-1)

This update for ghostscript fixes the following issue : Security issue fixed : CVE-2019-3838: Fixed a vulnerability which made forceput operator in DefineResource to be still accessible which could allow access to file system outside of the constraints of -dSAFER bsc1129186. Note that Tenable...

SUSE-SU-2019:0718-1 Security update for ghostscript

This update for ghostscript fixes the following issue: Security issue fixed: - CVE-2019-3838: Fixed a vulnerability which made forceput operator in DefineResource to be still accessible which could allow access to file system outside of the constraints of -dSAFER bsc1129186...

ghostscript security and bug fix update

9.07-31.el76.10 - Resolves: 1673915 - ghostscript: Regression: double comment chars '%' in gsinit.ps leading to missing metadata - Resolves: 1678171 - CVE-2019-3835 ghostscript: superexec operator is available 700585 - Resolves: 1680025 - CVE-2019-3838 ghostscript: forceput in DefineResource is...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : LibRaw vulnerabilities (USN-3838-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3838-1 advisory. It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a...

Ubuntu: Security Advisory (USN-3838-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated SDL_image packages fix security vulnerability

Multiple vulnerabilities have been discovered in the image loading library for Simple DirectMedia Layer 1.2, which could result in denial of service or the execution of arbitrary code if malformed image files are opened CVE-2017-12122, CVE-2017-14440, CVE-2017-14441, CVE-2017-14442, CVE-2017-1444...

Debian DSA-4184-1 : sdl-image1.2 - security update

Multiple vulnerabilities have been discovered in the image loading library for Simple DirectMedia Layer 1.2, which could result in denial of service or the execution of arbitrary code if malformed image files are opened. C Tenable Network Security, Inc. The descriptive text and package checks in...

[SECURITY] [DSA 4184-1] sdl-image1.2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4184-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 28, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4184-1] sdl-image1.2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4184-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 28, 2018 https://www.debian.org/security/faq -...

CVE-2018-3838

The CVE-2018-3838 entry concerns SDL2_image-2.0.2: an exploitable vulnerability in the XCF image rendering path can trigger an out-of-bounds read on the heap, leading to information disclosure. Public reports (e.g., TALOS advisories and related Debian/Gentoo/Mageia notices) confirm this family of...

Debian DSA-3838-1 : ghostscript - security update

Several vulnerabilities were discovered in Ghostscript, the GPL PostScript/PDF interpreter, which may lead to the execution of arbitrary code or denial of service if a specially crafted Postscript file is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Debian: Security Advisory (DSA-3838-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-3838

Cisco Secure Access Control System (ACS) contains a DOM-based XSS vulnerability that could be exploited by an unauthenticated, remote attacker via the web interface. The issue arises from insufficient input validation of a user-supplied value and affects at least release 5.8(2.5). The CVE entry i...

CVE-2016-3838

CVE-2016-3838 affects Android 6.x prior to 2016-08-01. The issue is a denial-of-service in which a crafted application using the app-pinning feature can cause loss of the locked-screen 911 functionality (internal bug 28761672). Connected sources corroborate the vulnerability as described in CVE r...

Oracle: Security Advisory (ELSA-2010-0825)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...