< back to search

gpp_maybe Security update for ghostscript-library
sdksp4-ghostscript-library-12781

This update for ghostscript-library fixes the following issues: - Multiple security vulnerabilities have been discovered where ghostscript's "-dsafer" flag did not provide sufficient protection against unintended access to the file system. Thus, a machine that would process a specially crafted Postscript file would potentially leak sensitive information to an attacker. (CVE-2013-5653, CVE-2016-7977, bsc#1001951) - Insufficient validation of the type of input in .initialize_dsc_parser used to allow remote code execution. (CVE-2016-7979, bsc#1001951) - An integer overflow in the gs_heap_alloc_bytes function used to allow remote attackers to cause a denial of service (crash) via specially crafted Postscript files. (CVE-2015-3228, boo#939342)

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 11.4 unknown
SUSE Linux Enterprise Software Development Kit 11.4 unknown
SUSE Linux Enterprise Software Development Kit 11.4 unknown
SUSE Linux Enterprise Software Development Kit 11.4 unknown
SUSE Linux Enterprise Software Development Kit 11.4 unknown