Lucene search

K
suseSuseOPENSUSE-SU-2017:1203-1
HistoryMay 08, 2017 - 6:15 p.m.

Security update for ghostscript (important)

2017-05-0818:15:39
lists.opensuse.org
31

0.255 Low

EPSS

Percentile

96.2%

This update for ghostscript fixes the following security vulnerabilities:

CVE-2017-8291: A remote command execution and a -dSAFER bypass via a
crafted .eps document were exploited in the wild. (bsc#1036453)

CVE-2016-9601: An integer overflow in the bundled jbig2dec library could
have been misused to cause a Denial-of-Service. (bsc#1018128)

CVE-2016-10220: A NULL pointer dereference in the PDF Transparency module
allowed remote attackers to cause a Denial-of-Service. (bsc#1032120)

CVE-2017-5951: A NULL pointer dereference allowed remote attackers to
cause a denial of service via a crafted PostScript document. (bsc#1032114)

CVE-2017-7207: A NULL pointer dereference allowed remote attackers to
cause a denial of service via a crafted PostScript document. (bsc#1030263)

This update was imported from the SUSE:SLE-12:Update update project.