MGASA-2019-0271

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2019-0271.html

Import Source

https://advisories.mageia.org/MGASA-2019-0271.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2019-0271

Related

Published

2019-09-12T19:09:52Z

Modified

2019-09-12T18:19:22Z

Summary

Updated ghostscript packages fix security vulnerabilities

Details

The updated packages fix security vulnerabilities:

Safer Mode Bypass by .forceput Exposure in .pdfhookDSC_Creator. (CVE-2019-14811)

Safer Mode Bypass by .forceput Exposure in setuserparams. (CVE-2019-14812)

Safer Mode Bypass by .forceput Exposure in setsystemparams. (CVE-2019-14813)

Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures. (CVE-2019-14817)

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

9.26-1.6.mga6

{
    "section": "core"
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

9.27-1.3.mga7

{
    "section": "core"
}