Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 465
Alerts This Week
Warning Icon 1 465

SciLinux SL7: SLSA-2017-2180-1 Low Severity Ghostscript Fix

Calendar Aug 21, 2017 • User Avatar LinuxSecurity Advisories
1 - 2 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory security fix ghostscript low severity NULL pointer crash issue scientific linux
A NULL pointer dereference flaw was found in ghostscript's mem_get_bits_rectangle function. A specially crafted postscript document could cause a crash in the context of the gs process. (CVE-2017-7207) SL7 x86_64 ghostscript-9.07-28.el7.i686.rpm ghostscript-9.07-28.el7.x86_64.rpm ghostscript-cups-9.07-28.el7.x86_64.rpm ghostscript-debuginfo-9.07-28.el7.i686.rpm ghostscri [More...] 
Synopsis:          Low: ghostscript security and bug fix update
Advisory ID:       SLSA-2017:2180-1
Issue Date:        2017-08-02
CVE Numbers:       CVE-2017-7207
--

Security Fix(es):

* A NULL pointer dereference flaw was found in ghostscript's
mem_get_bits_rectangle function. A specially crafted postscript document
could cause a crash in the context of the gs process. (CVE-2017-7207)
--

SL7
  x86_64
    ghostscript-9.07-28.el7.i686.rpm
    ghostscript-9.07-28.el7.x86_64.rpm
    ghostscript-cups-9.07-28.el7.x86_64.rpm
    ghostscript-debuginfo-9.07-28.el7.i686.rpm
    ghostscript-debuginfo-9.07-28.el7.x86_64.rpm
    ghostscript-devel-9.07-28.el7.i686.rpm
    ghostscript-devel-9.07-28.el7.x86_64.rpm
    ghostscript-gtk-9.07-28.el7.x86_64.rpm
  noarch
    ghostscript-doc-9.07-28.el7.noarch.rpm

- Scientific Linux Development Team