Alerts This Week
Warning Icon 1 483
Alerts This Week
Warning Icon 1 483

SUSE: 2018:4090-1 Important: Ghostscript Access Restrictions Fixed

suse
Calendar Grey December 12, 2018
Dist Suse Esm H88
A crucial patch for ImageMagick resolves several access limitations and container breach vulnerabilities.
An update that solves 8 vulnerabilities and has one errata is now available

Summary

This update for ghostscript to version 9.26 fixes the following issues: Security issues fixed: - CVE-2018-19475: Fixed bypass of an intended access restriction in psi/zdevice2.c (bsc#1117327) - CVE-2018-19476: Fixed bypass of an intended access restriction in psi/zicc.c (bsc#1117313) - CVE-2018-19477: Fixed bypass of an intended access restriction in psi/zfjbig2.c (bsc#1117274) - CVE-2018-19409: Check if another device is used correctly in LockSafetyParams (bsc#1117022) - CVE-2018-18284: Fixed potential sandbox escape through 1Policy operator (bsc#1112229) - CVE-2018-18073: Fixed leaks through operator in saved execution stacks (bsc#1111480) - CVE-2018-17961: Fixed a -dSAFER sandbox escape by bypassing executeonly (bsc#1111479)

Topics%20covered

Topics Covered

security advisory ghostscript important access restriction sandbox escape SUSE OpenStack

References

#1109105 #1111479 #1111480 #1112229 #1117022

#1117274 #1117313 #1117327 #1117331

Cross- CVE-2018-17183 CVE-2018-17961 CVE-2018-18073

CVE-2018-18284 CVE-2018-19409 CVE-2018-19475

CVE-2018-19476 CVE-2018-19477

Affected Products:

SUSE OpenStack Cloud 7

SUSE Linux Enterprise Software Development Kit 12-SP4

SUSE Linux Enterprise Software Development Kit 12-SP3

SUSE Linux Enterprise Server for SAP 12-SP2

SUSE Linux Enterprise Server 12-SP4

SUSE Linux Enterprise Server 12-SP3

SUSE Linux Enterprise Server 12-SP2-LTSS

SUSE Linux Enterprise Server 12-SP2-BCL

SUSE Linux Enterprise Server 12-SP1-LTSS

SUSE Linux Enterprise Server 12-LTSS

SUSE Linux Enterprise Desktop 12-SP4

SUSE Linux Enterprise Desktop 1...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2018:4090-1
Rating: important

Topics%20covered

Topics Covered

security advisory ghostscript important access restriction sandbox escape SUSE OpenStack

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here