Paketname
ghostscript
Datum
2010-05-19
Advisory ID
MDVSA-2010:102
Betroffene Versionen
2009.0 x86_64 , MES5 i586 , 2010.0 x86_64 , 2010.0 i586 , 2009.1 i586 , 2009.0 i586 , CS4.0 i586 , 2008.0 x86_64 , CS4.0 x86_64 , 2008.0 i586 , 2009.1 x86_64 , MES5 x86_64

Problembeschreibung

A vulnerability has been found and corrected in ghostscript:

Stack-based buffer overflow in the parser function in GhostScript 8.70
and 8.64 allows context-dependent attackers to execute arbitrary code
via a crafted PostScript file (CVE-2010-1869).

Packages for 2008.0 and 2009.0 are provided due to the Extended
Maintenance Program for those products.

The updated packages have been patched to correct this issue.

Aktualisierte Pakete

2009.0 x86_64

 4d99897152b722af1790ee2d21477f98  2009.0/x86_64/ghostscript-8.63-62.4mdv2009.0.x86_64.rpm
 f7b37265291b0009eb9192e54ae85ae5  2009.0/x86_64/ghostscript-common-8.63-62.4mdv2009.0.x86_64.rpm
 84328212d3054a260794c71c2b98d378  2009.0/x86_64/ghostscript-doc-8.63-62.4mdv2009.0.x86_64.rpm
 80b3021580aaf26899a76d50105afc12  2009.0/x86_64/ghostscript-dvipdf-8.63-62.4mdv2009.0.x86_64.rpm
 dc8dd899efe90df34ba88b179544234d  2009.0/x86_64/ghostscript-module-X-8.63-62.4mdv2009.0.x86_64.rpm
 46eca8c6a32a8ed1187d9ec73ceddc51  2009.0/x86_64/ghostscript-X-8.63-62.4mdv2009.0.x86_64.rpm
 c84e7a4d7ac2787413a170f8cf717ab2  2009.0/x86_64/lib64gs8-8.63-62.4mdv2009.0.x86_64.rpm
 a6e22b819a271a8b3b9be359bf9a9322  2009.0/x86_64/lib64gs8-devel-8.63-62.4mdv2009.0.x86_64.rpm
 11d9d6d305015e0b5f3476d16f035289  2009.0/x86_64/lib64ijs1-0.35-62.4mdv2009.0.x86_64.rpm
 ed90dc82c29f5fe1eeb8ecbc6a430e2a  2009.0/x86_64/lib64ijs1-devel-0.35-62.4mdv2009.0.x86_64.rpm 
 0f4df74cabfdabb8044df866629ded1d  2009.0/SRPMS/ghostscript-8.63-62.4mdv2009.0.src.rpm

MES5 i586

 86624ba14e7c0fdd9856725dfe7644e7  mes5/i586/ghostscript-8.63-62.4mdvmes5.1.i586.rpm
 2b124bd39a9b6cd96de26f657fde5dbd  mes5/i586/ghostscript-common-8.63-62.4mdvmes5.1.i586.rpm
 eb3b05bca5cbc8edce86d83ed908ea7f  mes5/i586/ghostscript-doc-8.63-62.4mdvmes5.1.i586.rpm
 31593b2e8da79e4af8afbcfb8899ea43  mes5/i586/ghostscript-dvipdf-8.63-62.4mdvmes5.1.i586.rpm
 1d8254b2063933769c5f58bb45553bff  mes5/i586/ghostscript-module-X-8.63-62.4mdvmes5.1.i586.rpm
 070c094d2195733316efb75c416bc612  mes5/i586/ghostscript-X-8.63-62.4mdvmes5.1.i586.rpm
 b23d826a174479964126b73ff3238495  mes5/i586/libgs8-8.63-62.4mdvmes5.1.i586.rpm
 79da2ab04cc49f3cf33f5a22d8e368a3  mes5/i586/libgs8-devel-8.63-62.4mdvmes5.1.i586.rpm
 54f4c76fdda312a6332acbc733413363  mes5/i586/libijs1-0.35-62.4mdvmes5.1.i586.rpm
 a168e7f8498acd6c1c89187b43918971  mes5/i586/libijs1-devel-0.35-62.4mdvmes5.1.i586.rpm 
 0bca27a00704c2ac8896caaba43aa8cb  mes5/SRPMS/ghostscript-8.63-62.4mdvmes5.1.src.rpm

2010.0 x86_64

 de947e192d4fd19c3757371b04d47115  2010.0/x86_64/ghostscript-8.64-69.1mdv2010.0.x86_64.rpm
 af183bf415c188407626d3028c96fcfb  2010.0/x86_64/ghostscript-common-8.64-69.1mdv2010.0.x86_64.rpm
 db4dd5a32f5ac87dad503f3b3b4648f5  2010.0/x86_64/ghostscript-doc-8.64-69.1mdv2010.0.x86_64.rpm
 8deb6ff64eaec9a9a2b8fa6b8e36a23b  2010.0/x86_64/ghostscript-dvipdf-8.64-69.1mdv2010.0.x86_64.rpm
 56cd07afffaf82faebb76bdc317a4b79  2010.0/x86_64/ghostscript-module-X-8.64-69.1mdv2010.0.x86_64.rpm
 564cc4f8a43caf41d3faf56848dddb1f  2010.0/x86_64/ghostscript-X-8.64-69.1mdv2010.0.x86_64.rpm
 a4379f933a5fe1e06132b91ab2a592e7  2010.0/x86_64/lib64gs8-8.64-69.1mdv2010.0.x86_64.rpm
 5288d2a1807da31f2b3884034f3c43aa  2010.0/x86_64/lib64gs8-devel-8.64-69.1mdv2010.0.x86_64.rpm
 92adaf591aba09e6735c4e764764b3a8  2010.0/x86_64/lib64ijs1-0.35-69.1mdv2010.0.x86_64.rpm
 9bb1e4d39faf5a197f250b0f2a8347dd  2010.0/x86_64/lib64ijs1-devel-0.35-69.1mdv2010.0.x86_64.rpm 
 05633c1ea524326727a7db485c72539f  2010.0/SRPMS/ghostscript-8.64-69.1mdv2010.0.src.rpm

2010.0 i586

 7a648f7050536a867d407999c02efe53  2010.0/i586/ghostscript-8.64-69.1mdv2010.0.i586.rpm
 50e716baff81b930f25807f6e38aa084  2010.0/i586/ghostscript-common-8.64-69.1mdv2010.0.i586.rpm
 73c2017d6a19d94edbf20474873e6eac  2010.0/i586/ghostscript-doc-8.64-69.1mdv2010.0.i586.rpm
 0146e7c7ce4b5ed519654fe6ea618ba3  2010.0/i586/ghostscript-dvipdf-8.64-69.1mdv2010.0.i586.rpm
 c38e2e9b62814ddff5c43edf20c9feac  2010.0/i586/ghostscript-module-X-8.64-69.1mdv2010.0.i586.rpm
 2d89a346e39d48cb8a0949fa7545e7ce  2010.0/i586/ghostscript-X-8.64-69.1mdv2010.0.i586.rpm
 a38d3c8e82aff09967da065417d18367  2010.0/i586/libgs8-8.64-69.1mdv2010.0.i586.rpm
 eca82980f75e33be4f5e9357f1affb1c  2010.0/i586/libgs8-devel-8.64-69.1mdv2010.0.i586.rpm
 13ad034d9c766245e688d000c4d3aca5  2010.0/i586/libijs1-0.35-69.1mdv2010.0.i586.rpm
 83c45b12a0fa06e9f76aa5da146a7b54  2010.0/i586/libijs1-devel-0.35-69.1mdv2010.0.i586.rpm 
 05633c1ea524326727a7db485c72539f  2010.0/SRPMS/ghostscript-8.64-69.1mdv2010.0.src.rpm

2009.1 i586

 b347c5be523982da5b669b4ebca2e0ba  2009.1/i586/ghostscript-8.64-65.2mdv2009.1.i586.rpm
 b6ecc633210f7012c39aaad50ced24db  2009.1/i586/ghostscript-common-8.64-65.2mdv2009.1.i586.rpm
 4e5f0f9f1e0ed63779cfd0e58bcbeb2f  2009.1/i586/ghostscript-doc-8.64-65.2mdv2009.1.i586.rpm
 0b9eb533d78d8ac0edfe21b74879b3c7  2009.1/i586/ghostscript-dvipdf-8.64-65.2mdv2009.1.i586.rpm
 11630a17c9c82c899c965e76f0c563da  2009.1/i586/ghostscript-module-X-8.64-65.2mdv2009.1.i586.rpm
 f564cd779df316cfbbebcc105a8e28d2  2009.1/i586/ghostscript-X-8.64-65.2mdv2009.1.i586.rpm
 4ea5a21cfdd3d1d7128d4c07b14b39dd  2009.1/i586/libgs8-8.64-65.2mdv2009.1.i586.rpm
 5498873fa9c05f336acc16c1993b0797  2009.1/i586/libgs8-devel-8.64-65.2mdv2009.1.i586.rpm
 18e11befa41022995911ff65a7b807c3  2009.1/i586/libijs1-0.35-65.2mdv2009.1.i586.rpm
 190fbe724fb037dd3929da67a594c928  2009.1/i586/libijs1-devel-0.35-65.2mdv2009.1.i586.rpm 
 13d3c8bfdb740bf7b451fe4863227024  2009.1/SRPMS/ghostscript-8.64-65.2mdv2009.1.src.rpm

2009.0 i586

 313c90cbecfb0550d694465260cbb20f  2009.0/i586/ghostscript-8.63-62.4mdv2009.0.i586.rpm
 92529376e7d97597d7e26b78907a1ef7  2009.0/i586/ghostscript-common-8.63-62.4mdv2009.0.i586.rpm
 44a4a7e35bc90c9e182a11914e3c544e  2009.0/i586/ghostscript-doc-8.63-62.4mdv2009.0.i586.rpm
 bf0ccaf33210a597f13a50c4cdd2ed5a  2009.0/i586/ghostscript-dvipdf-8.63-62.4mdv2009.0.i586.rpm
 6f51150145c3f4c4dcf6246d4d09ae34  2009.0/i586/ghostscript-module-X-8.63-62.4mdv2009.0.i586.rpm
 aeedaac055088476373e4132e6246aa8  2009.0/i586/ghostscript-X-8.63-62.4mdv2009.0.i586.rpm
 da6acb6651bef2476e57a8e532bfa1df  2009.0/i586/libgs8-8.63-62.4mdv2009.0.i586.rpm
 7cf648668272889a57f24ecda15d61fe  2009.0/i586/libgs8-devel-8.63-62.4mdv2009.0.i586.rpm
 5d6f3e8918640c1613b1c52a2ee5be9c  2009.0/i586/libijs1-0.35-62.4mdv2009.0.i586.rpm
 5c86592e180faf768e4df4294f173d77  2009.0/i586/libijs1-devel-0.35-62.4mdv2009.0.i586.rpm 
 0f4df74cabfdabb8044df866629ded1d  2009.0/SRPMS/ghostscript-8.63-62.4mdv2009.0.src.rpm

CS4.0 i586

 9cb8f3900c93bb991986ba9cb4bc30e8  corporate/4.0/i586/ghostscript-8.15-46.3.20060mlcs4.i586.rpm
 f828214a2c138a3d85120d30dec34c4d  corporate/4.0/i586/ghostscript-common-8.15-46.3.20060mlcs4.i586.rpm
 bf635e5a119e66182b3eb60af9aad944  corporate/4.0/i586/ghostscript-dvipdf-8.15-46.3.20060mlcs4.i586.rpm
 a91390460c04bf47be2600ac75120241  corporate/4.0/i586/ghostscript-module-X-8.15-46.3.20060mlcs4.i586.rpm
 e0c399cff8fa6c20526aec6df79c3fd8  corporate/4.0/i586/ghostscript-X-8.15-46.3.20060mlcs4.i586.rpm
 21741e45e78a0c2dec56f59e711ce09e  corporate/4.0/i586/libgs8-8.15-46.3.20060mlcs4.i586.rpm
 69185151ea9b0f1e3a0a60a391a0506e  corporate/4.0/i586/libgs8-devel-8.15-46.3.20060mlcs4.i586.rpm
 72222457301550f58dee02d070b1ed95  corporate/4.0/i586/libijs1-0.35-46.3.20060mlcs4.i586.rpm
 c8f5c821561fb3baf9acf7496d3e7b3a  corporate/4.0/i586/libijs1-devel-0.35-46.3.20060mlcs4.i586.rpm 
 4f4fbfbe952492d6cb028020b11503de  corporate/4.0/SRPMS/ghostscript-8.15-46.3.20060mlcs4.src.rpm

2008.0 x86_64

 af8fa9e179d9424936442ccd8652768c  2008.0/x86_64/ghostscript-8.60-55.4mdv2008.0.x86_64.rpm
 ecb7f8866d1a81253f05a8969ca5298b  2008.0/x86_64/ghostscript-common-8.60-55.4mdv2008.0.x86_64.rpm
 154917c6a3e62e1c8a732b967bed17bd  2008.0/x86_64/ghostscript-doc-8.60-55.4mdv2008.0.x86_64.rpm
 425f73ed07473af4bb82441eedeb312c  2008.0/x86_64/ghostscript-dvipdf-8.60-55.4mdv2008.0.x86_64.rpm
 9c1651257fa13099729eb46122f670c9  2008.0/x86_64/ghostscript-module-X-8.60-55.4mdv2008.0.x86_64.rpm
 76cb1271dd09aea19b6836776b44a823  2008.0/x86_64/ghostscript-X-8.60-55.4mdv2008.0.x86_64.rpm
 1f126e7c633c6f0c0cef3b6562f4ed66  2008.0/x86_64/lib64gs8-8.60-55.4mdv2008.0.x86_64.rpm
 f8b9da1f427dacafaf02ab1bd9bf265d  2008.0/x86_64/lib64gs8-devel-8.60-55.4mdv2008.0.x86_64.rpm
 ee83e8a4732e7d32770ac78b639022b7  2008.0/x86_64/lib64ijs1-0.35-55.4mdv2008.0.x86_64.rpm
 4f8628d00af7b4ecfaa0a3ccacdb1ed4  2008.0/x86_64/lib64ijs1-devel-0.35-55.4mdv2008.0.x86_64.rpm 
 3660d3ab7bf3f0549df5ee5c0fe75282  2008.0/SRPMS/ghostscript-8.60-55.4mdv2008.0.src.rpm

CS4.0 x86_64

 5b33ba915d6261abbfc6dad1222a8bff  corporate/4.0/x86_64/ghostscript-8.15-46.3.20060mlcs4.x86_64.rpm
 5093e1bc56583303dd20d3f5f9194239  corporate/4.0/x86_64/ghostscript-common-8.15-46.3.20060mlcs4.x86_64.rpm
 15a3f7d7631b5c3815e23aef619b74ad  corporate/4.0/x86_64/ghostscript-dvipdf-8.15-46.3.20060mlcs4.x86_64.rpm
 97a12577502cca5c55ec473b02c4513f  corporate/4.0/x86_64/ghostscript-module-X-8.15-46.3.20060mlcs4.x86_64.rpm
 bd3cdc393b6ee0178e4c5c9f04197d90  corporate/4.0/x86_64/ghostscript-X-8.15-46.3.20060mlcs4.x86_64.rpm
 698f95ea98989cc550e538ee84d81165  corporate/4.0/x86_64/lib64gs8-8.15-46.3.20060mlcs4.x86_64.rpm
 4d9ecd9c9653a9919dc3a94c19ad2fd8  corporate/4.0/x86_64/lib64gs8-devel-8.15-46.3.20060mlcs4.x86_64.rpm
 b4b6bb5147eeae90de565fdb36bc497c  corporate/4.0/x86_64/lib64ijs1-0.35-46.3.20060mlcs4.x86_64.rpm
 7bcfd3d13f3fd56f250d45c1951ec716  corporate/4.0/x86_64/lib64ijs1-devel-0.35-46.3.20060mlcs4.x86_64.rpm 
 4f4fbfbe952492d6cb028020b11503de  corporate/4.0/SRPMS/ghostscript-8.15-46.3.20060mlcs4.src.rpm

2008.0 i586

 c1360edcc6bda79fa0f1a0f241f3cec3  2008.0/i586/ghostscript-8.60-55.4mdv2008.0.i586.rpm
 d02a623cf71a49f9cc262f900fed7e3a  2008.0/i586/ghostscript-common-8.60-55.4mdv2008.0.i586.rpm
 bae51676f8d807bbdb89ce1c6c5480c6  2008.0/i586/ghostscript-doc-8.60-55.4mdv2008.0.i586.rpm
 5fef2add7461a2403a511844d20c7987  2008.0/i586/ghostscript-dvipdf-8.60-55.4mdv2008.0.i586.rpm
 676509ea8efbcc200f3249d6ddfd4415  2008.0/i586/ghostscript-module-X-8.60-55.4mdv2008.0.i586.rpm
 3210c5240f1fb6a35ebc7e548702ed52  2008.0/i586/ghostscript-X-8.60-55.4mdv2008.0.i586.rpm
 c0ec0c5654838c2d651b874fd31ab1d4  2008.0/i586/libgs8-8.60-55.4mdv2008.0.i586.rpm
 5245c2f5fda2a26194d80eae9ed95eee  2008.0/i586/libgs8-devel-8.60-55.4mdv2008.0.i586.rpm
 160058f2cf27d3a206349a7d9e95fe36  2008.0/i586/libijs1-0.35-55.4mdv2008.0.i586.rpm
 15af2da5f6685e7099407a5433590d6f  2008.0/i586/libijs1-devel-0.35-55.4mdv2008.0.i586.rpm 
 3660d3ab7bf3f0549df5ee5c0fe75282  2008.0/SRPMS/ghostscript-8.60-55.4mdv2008.0.src.rpm

2009.1 x86_64

 f367530ff49048e50fa6dae831c85dda  2009.1/x86_64/ghostscript-8.64-65.2mdv2009.1.x86_64.rpm
 bc898737acfc5e8438b385598ae9b46e  2009.1/x86_64/ghostscript-common-8.64-65.2mdv2009.1.x86_64.rpm
 fc01dbc8a909ab2e7d02d9b709e82871  2009.1/x86_64/ghostscript-doc-8.64-65.2mdv2009.1.x86_64.rpm
 694077d119862d5f4823492969088b3f  2009.1/x86_64/ghostscript-dvipdf-8.64-65.2mdv2009.1.x86_64.rpm
 f6bec3c1704e462749de36c46f4db204  2009.1/x86_64/ghostscript-module-X-8.64-65.2mdv2009.1.x86_64.rpm
 9b2717c43494f263d7a37e25a19bdcc1  2009.1/x86_64/ghostscript-X-8.64-65.2mdv2009.1.x86_64.rpm
 29df7661133e45f7769f776041288e51  2009.1/x86_64/lib64gs8-8.64-65.2mdv2009.1.x86_64.rpm
 ed3fc7c79b8f5e23cfaa32601501a69b  2009.1/x86_64/lib64gs8-devel-8.64-65.2mdv2009.1.x86_64.rpm
 0dd8294088520e83ffcb0818ecdb7ad3  2009.1/x86_64/lib64ijs1-0.35-65.2mdv2009.1.x86_64.rpm
 b1fcb9b697ec0717f3f27b94da1767d6  2009.1/x86_64/lib64ijs1-devel-0.35-65.2mdv2009.1.x86_64.rpm 
 13d3c8bfdb740bf7b451fe4863227024  2009.1/SRPMS/ghostscript-8.64-65.2mdv2009.1.src.rpm

MES5 x86_64

 6546f0b510efbe11367ea5c14d84ced7  mes5/x86_64/ghostscript-8.63-62.4mdvmes5.1.x86_64.rpm
 df26a454dfb3d9feb396133c93a5bacd  mes5/x86_64/ghostscript-common-8.63-62.4mdvmes5.1.x86_64.rpm
 2da8d9cdab1e81d2bca5a32f9d17838d  mes5/x86_64/ghostscript-doc-8.63-62.4mdvmes5.1.x86_64.rpm
 d42d41adea2a77cf0dd204222d1fcd3c  mes5/x86_64/ghostscript-dvipdf-8.63-62.4mdvmes5.1.x86_64.rpm
 2c8bdac0fc03185381918a5471104bf9  mes5/x86_64/ghostscript-module-X-8.63-62.4mdvmes5.1.x86_64.rpm
 2f8c45e461f2365641ad973c294cf246  mes5/x86_64/ghostscript-X-8.63-62.4mdvmes5.1.x86_64.rpm
 0cc3dfad8881a1b2e7440b9a88463720  mes5/x86_64/lib64gs8-8.63-62.4mdvmes5.1.x86_64.rpm
 a3282f4cb62138b656e9e2b499a362bd  mes5/x86_64/lib64gs8-devel-8.63-62.4mdvmes5.1.x86_64.rpm
 ba01f7b7ed7e9de0b68b138ceaf09229  mes5/x86_64/lib64ijs1-0.35-62.4mdvmes5.1.x86_64.rpm
 726fe6f338a3f4db537d99f14abc6d81  mes5/x86_64/lib64ijs1-devel-0.35-62.4mdvmes5.1.x86_64.rpm 
 0bca27a00704c2ac8896caaba43aa8cb  mes5/SRPMS/ghostscript-8.63-62.4mdvmes5.1.src.rpm

Referenzen