Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

Slackware 12.2 Ghostscript Update SSA: 2009-181-01 Severe DoS Risk

slackware
Calendar Grey June 30, 2009
Dist Slackware Esm H88
Updated Ghostscript packages for Slackware 12.1 and 12.2 now available, aimed at fixing security vulnerabilities and enhancing overall security measures.
New ghostscript packages are available for Slackware 12.1, 12.2, and -current to fix security issues

Summary

Here are the details from the Slackware 12.2 ChangeLog: patches/packages/ghostscript-8.63-i486-3_slack12.2.tgz: Rebuilt. Patched various problems with ghostscript that could lead to a denial of service or the execution of arbitrary code when processing a malicious or malformed file. For more information, see: https://www.cve.org/CVERecord?id=CVE-2009-0196 https://www.cve.org/CVERecord?id=CVE-2009-0583 https://www.cve.org/CVERecord?id=CVE-2009-0584 https://www.cve.org/CVERecord?id=CVE-2009-0792 (* Security fix *)

Where Find New Packages

HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading directly from ftp.slackware.com.
Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating additional FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 12.1: ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/ghostscript-8.62-i486-6_slack12.1.tgz
Updated package for Slackware 12.2: ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ghostscript-8.63-i486-3_slack12.2.tgz
Updated package for Slackware -current:
Updated package for Slackware64 -current:

MD5 Signatures

Slackware 12.1 package: 052df55ec047d8ea8523dbd344ed75f1 ghostscript-8.62-i486-6_slack12.1.tgz
Slackware 12.2 package: 2a674db1adf4f1c77bdfecb0758df5a2 ghostscript-8.63-i486-3_slack12.2.tgz
Slackware -current package: cfb4a6cad4e409fb6cfdcfc13208b8b6 ghostscript-8.64-i486-2.txz
Slackware64 -current package: 8b313fdb584c6533175b3adc2ceccf8f ghostscript-8.64-x86_64-2.txz

Severity
critical
Lowest
Low
Medium
High
Critical

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg ghostscript-8.63-i486-3_slack12.2.tgz

Related News

Your message here