Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.1.13.2018.256.01
Category:Slackware Local Security Checks
Title:Slackware: Security Advisory (SSA:2018-256-01)
Summary:The remote host is missing an update for the 'ghostscript' package(s) announced via the SSA:2018-256-01 advisory.
Description:Summary:
The remote host is missing an update for the 'ghostscript' package(s) announced via the SSA:2018-256-01 advisory.

Vulnerability Insight:
New ghostscript packages are available for Slackware 14.2 and -current to
fix security issues.


Here are the details from the Slackware 14.2 ChangeLog:
+--------------------------+
patches/packages/ghostscript-9.25-i586-1_slack14.2.txz: Upgraded.
This release fixes problems with argument handling, some unintended
results of the security fixes to the SAFER file access restrictions
(specifically accessing ICC profile files), and some additional
security issues over the recent 9.24 release.
For more information, see:
[link moved to references]
(* Security fix *)
+--------------------------+

Affected Software/OS:
'ghostscript' package(s) on Slackware 14.2, Slackware current.

Solution:
Please install the updated package(s).

CVSS Score:
9.3

CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2018-16509
BugTraq ID: 105122
http://www.securityfocus.com/bid/105122
Debian Security Information: DSA-4294 (Google Search)
https://www.debian.org/security/2018/dsa-4294
https://www.exploit-db.com/exploits/45369/
https://security.gentoo.org/glsa/201811-12
http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=5516c614dc33662a2afdc377159f70218e67bde5
http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=78911a01b67d590b4a91afac2e8417360b934156
http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=79cccf641486a6595c43f1de1cd7ade696020a31
http://seclists.org/oss-sec/2018/q3/142
https://bugs.ghostscript.com/show_bug.cgi?id=699654
https://www.artifex.com/news/ghostscript-security-resolved/
https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html
RedHat Security Advisories: RHSA-2018:2918
https://access.redhat.com/errata/RHSA-2018:2918
RedHat Security Advisories: RHSA-2018:3760
https://access.redhat.com/errata/RHSA-2018:3760
https://usn.ubuntu.com/3768-1/
CopyrightCopyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.