SUSE-SU-2017:1322-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2017:1322-1

UNKNOWN

Security update for ghostscript-library

Published May 17, 2017

Modified 8 years ago

Fix available

Details

This update for ghostscript fixes the following security vulnerability:

CVE-2017-8291: A remote command execution and a -dSAFER bypass via a crafted .eps document were exploited in the wild. (bsc#1036453)

This update is a reissue including the SUSE Linux Enterprise 11 SP3 product.

Affected Packages

ghostscript-fonts-other

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP3-LTSSSUSE Linux Enterprise Server 11 SP3-TERADATASUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP4

Fixed in:

8.62-32.46.1

ghostscript-fonts-rus

Fixed in:

8.62-32.46.1

ghostscript-fonts-std

Fixed in:

8.62-32.46.1

ghostscript-library

Fixed in:

8.62-32.46.1

ghostscript-omni

Fixed in:

8.62-32.46.1

ghostscript-x11

Fixed in:

8.62-32.46.1

libgimpprint

Fixed in:

4.2.7-32.46.1

ghostscript-devel

SUSE Linux Enterprise Software Development Kit 11 SP4

Fixed in:

8.62-32.46.1

ghostscript-ijs-devel

SUSE Linux Enterprise Software Development Kit 11 SP4

Fixed in:

8.62-32.46.1

libgimpprint-devel

SUSE Linux Enterprise Software Development Kit 11 SP4

Fixed in:

4.2.7-32.46.1

References

REPORT

https://bugzilla.suse.com/1036453

WEB

https://www.suse.com/security/cve/CVE-2017-8291

ADVISORY

https://www.suse.com/support/update/announcement/2017/suse-su-20171322-1/

Upstream

CVE-2017-8291

Ecosystems(7)

SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4

Timeline

PublishedMay 17, 2017

ModifiedMay 17, 2017