Package name
ghostscript
Date
2008-02-29
Advisory ID
MDVSA-2008:055
Affected versions
CS4.0 i586 , CS4.0 x86_64 , 2007.0 x86_64 , 2007.1 i586 , 2007.0 i586 , CS3.0 x86_64 , 2008.0 x86_64 , CS3.0 i586 , 2008.0 i586 , 2007.1 x86_64

Problem description

Chris Evans found a buffer overflow condition in Ghostscript, which can
lead to arbitrary code execution as the user running any application
using it to process a maliciously crafted Postscript file.

The updated packages have been patched to prevent this issue.

Updated packages

CS4.0 i586

 128e352634d19ad2a2a58de91dc4ed61  corporate/4.0/i586/ghostscript-8.15-46.1.20060mlcs4.i586.rpm
 9b4de45a1c1bf7f628a2e82520ca8386  corporate/4.0/i586/ghostscript-X-8.15-46.1.20060mlcs4.i586.rpm
 3c690dfaabfb637cbb801a897b891928  corporate/4.0/i586/ghostscript-common-8.15-46.1.20060mlcs4.i586.rpm
 87a1efaed3d6135cedf0f8a0092cd0f7  corporate/4.0/i586/ghostscript-dvipdf-8.15-46.1.20060mlcs4.i586.rpm
 3710458d31e1254782fe3b2c700022f5  corporate/4.0/i586/ghostscript-module-X-8.15-46.1.20060mlcs4.i586.rpm
 cae65be57bfe60ff962f38ec21da10a6  corporate/4.0/i586/libgs8-8.15-46.1.20060mlcs4.i586.rpm
 69cda6990a6bd4fc281bba2310d782a4  corporate/4.0/i586/libgs8-devel-8.15-46.1.20060mlcs4.i586.rpm
 608259ea7eca0233dacf0423cf4412ce  corporate/4.0/i586/libijs1-0.35-46.1.20060mlcs4.i586.rpm
 5c7dc11cbd7bef1304484fdfa73254df  corporate/4.0/i586/libijs1-devel-0.35-46.1.20060mlcs4.i586.rpm 
 17b52eacabca6e84238c4e0400caad6d  corporate/4.0/SRPMS/ghostscript-8.15-46.1.20060mlcs4.src.rpm

CS4.0 x86_64

 f30959f1ab27734a96a5aff0f89b655b  corporate/4.0/x86_64/ghostscript-8.15-46.1.20060mlcs4.x86_64.rpm
 2b360f654a4239bc9445be1ee988dac8  corporate/4.0/x86_64/ghostscript-X-8.15-46.1.20060mlcs4.x86_64.rpm
 cd43deb0bb76723dc1991b6b38d40e5f  corporate/4.0/x86_64/ghostscript-common-8.15-46.1.20060mlcs4.x86_64.rpm
 2336c92f72f4c023a06b83ad8d00e739  corporate/4.0/x86_64/ghostscript-dvipdf-8.15-46.1.20060mlcs4.x86_64.rpm
 c7749f1faf9dbb1119796dfc3234ff0c  corporate/4.0/x86_64/ghostscript-module-X-8.15-46.1.20060mlcs4.x86_64.rpm
 55a229c2bcd6ce2db4e4eb63cc511420  corporate/4.0/x86_64/lib64gs8-8.15-46.1.20060mlcs4.x86_64.rpm
 1e3a9b7b9524e064b8527b3fdccf9ed0  corporate/4.0/x86_64/lib64gs8-devel-8.15-46.1.20060mlcs4.x86_64.rpm
 6b2abd6151b5d2bb9d55c0a14cca79d2  corporate/4.0/x86_64/lib64ijs1-0.35-46.1.20060mlcs4.x86_64.rpm
 b40fa6a2c4adabecdedd0363fd62c893  corporate/4.0/x86_64/lib64ijs1-devel-0.35-46.1.20060mlcs4.x86_64.rpm 
 17b52eacabca6e84238c4e0400caad6d  corporate/4.0/SRPMS/ghostscript-8.15-46.1.20060mlcs4.src.rpm

2007.0 x86_64

 0258f184c3bec2d9361a8ef20def2603  2007.0/x86_64/ghostscript-8.15-47.1mdv2007.0.x86_64.rpm
 ecd4058e54b39c09ec7c5d4ab7cd8e6b  2007.0/x86_64/ghostscript-X-8.15-47.1mdv2007.0.x86_64.rpm
 cc0f588e9b3abbed1f04296410361ad2  2007.0/x86_64/ghostscript-common-8.15-47.1mdv2007.0.x86_64.rpm
 d3a23bc6a83a50a04336757f856df761  2007.0/x86_64/ghostscript-dvipdf-8.15-47.1mdv2007.0.x86_64.rpm
 916ea2a068afaf69a8dcb182ae409098  2007.0/x86_64/ghostscript-module-X-8.15-47.1mdv2007.0.x86_64.rpm
 ab38b291e058f0fe93b35d647845d696  2007.0/x86_64/lib64gs8-8.15-47.1mdv2007.0.x86_64.rpm
 35c21066635384bc779d7191421dbdec  2007.0/x86_64/lib64gs8-devel-8.15-47.1mdv2007.0.x86_64.rpm
 565329aff7352e288bd013255a8ab2c0  2007.0/x86_64/lib64ijs1-0.35-47.1mdv2007.0.x86_64.rpm
 5e9b515501e6cd3c85bba86e124f709d  2007.0/x86_64/lib64ijs1-devel-0.35-47.1mdv2007.0.x86_64.rpm 
 e87895f43a658ff693dd890f70cac645  2007.0/SRPMS/ghostscript-8.15-47.1mdv2007.0.src.rpm

2007.1 i586

 8fcddc25006640ddefc391d31b08ce2b  2007.1/i586/ghostscript-8.15-48.1mdv2007.1.i586.rpm
 c7e24d11078548da50369047e1fdecb3  2007.1/i586/ghostscript-X-8.15-48.1mdv2007.1.i586.rpm
 d9445eab4bb7e790448c4c802d941dbe  2007.1/i586/ghostscript-common-8.15-48.1mdv2007.1.i586.rpm
 493426cfe807f8ca889a96ee458bcc3a  2007.1/i586/ghostscript-doc-8.15-48.1mdv2007.1.i586.rpm
 62a0643bb8cd0e0844509493668a4953  2007.1/i586/ghostscript-dvipdf-8.15-48.1mdv2007.1.i586.rpm
 c4464465d644514bfdf0a4bc625f0119  2007.1/i586/ghostscript-module-X-8.15-48.1mdv2007.1.i586.rpm
 eed89d0bc2cc95e9adc672fdd59ebb31  2007.1/i586/libgs8-8.15-48.1mdv2007.1.i586.rpm
 ea8dd403702adc9253a59486281f8e56  2007.1/i586/libgs8-devel-8.15-48.1mdv2007.1.i586.rpm
 b49d72f566ab385207a7c45b3a803d5c  2007.1/i586/libijs1-0.35-48.1mdv2007.1.i586.rpm
 e957af9ea00fa1af8a88bcad71b00da5  2007.1/i586/libijs1-devel-0.35-48.1mdv2007.1.i586.rpm 
 ce698dd8e3d6ffa4dac9c85c6774b705  2007.1/SRPMS/ghostscript-8.15-48.1mdv2007.1.src.rpm

2007.0 i586

 adc368d980c87e91a980e485fb4e354d  2007.0/i586/ghostscript-8.15-47.1mdv2007.0.i586.rpm
 f46e26b01e4680e08df41f74aeb72f74  2007.0/i586/ghostscript-X-8.15-47.1mdv2007.0.i586.rpm
 868b81c842717472ee1c6b3e968b9299  2007.0/i586/ghostscript-common-8.15-47.1mdv2007.0.i586.rpm
 59e54a2acbba194ef3e322db75fb3eae  2007.0/i586/ghostscript-dvipdf-8.15-47.1mdv2007.0.i586.rpm
 03393c9564dfe104169618f8132e76c7  2007.0/i586/ghostscript-module-X-8.15-47.1mdv2007.0.i586.rpm
 476b2b85012f5671577f691981b70cb6  2007.0/i586/libgs8-8.15-47.1mdv2007.0.i586.rpm
 edaca05744d4e3e06ece218f096d318b  2007.0/i586/libgs8-devel-8.15-47.1mdv2007.0.i586.rpm
 4f3095b54b404cb51a351b8fd36a58c6  2007.0/i586/libijs1-0.35-47.1mdv2007.0.i586.rpm
 4fc99d3d1365a0f64e8828c0389396e2  2007.0/i586/libijs1-devel-0.35-47.1mdv2007.0.i586.rpm 
 e87895f43a658ff693dd890f70cac645  2007.0/SRPMS/ghostscript-8.15-47.1mdv2007.0.src.rpm

CS3.0 x86_64

 a12fc68fbca48a9008171cc549a35cbd  corporate/3.0/x86_64/cups-drivers-1.1-138.5.C30mdk.x86_64.rpm
 22cf7cedcb279846c96c706194faa521  corporate/3.0/x86_64/foomatic-db-3.0.1-0.20040828.1.5.C30mdk.x86_64.rpm
 316c8ab01584711de457f9e7456e81e5  corporate/3.0/x86_64/foomatic-db-engine-3.0.1-0.20040828.1.5.C30mdk.x86_64.rpm
 1dd119152e63debdfce4363fea924162  corporate/3.0/x86_64/foomatic-filters-3.0.1-0.20040828.1.5.C30mdk.x86_64.rpm
 51aef80b3a4b53fd50d586f94d06788f  corporate/3.0/x86_64/ghostscript-7.07-19.5.C30mdk.x86_64.rpm
 d8d729244d5c80e2c5b7e57a9246a81c  corporate/3.0/x86_64/ghostscript-module-X-7.07-19.5.C30mdk.x86_64.rpm
 e55c8ebe3c1c3c16c15e09af3ba5bbe3  corporate/3.0/x86_64/gimpprint-4.2.7-2.5.C30mdk.x86_64.rpm
 774e97478f61467e6c49071762d1aa5c  corporate/3.0/x86_64/lib64gimpprint1-4.2.7-2.5.C30mdk.x86_64.rpm
 0ae3a70574550131e04de6dd4d56b993  corporate/3.0/x86_64/lib64gimpprint1-devel-4.2.7-2.5.C30mdk.x86_64.rpm
 ce0029f485507164d9ac22004c799b94  corporate/3.0/x86_64/lib64ijs0-0.34-76.5.C30mdk.x86_64.rpm
 a3dc01753e534d6d2322e857ab1342ab  corporate/3.0/x86_64/lib64ijs0-devel-0.34-76.5.C30mdk.x86_64.rpm
 8850a9977a07ce8d0aae8e7f267dd035  corporate/3.0/x86_64/printer-filters-1.0-138.5.C30mdk.x86_64.rpm
 2b64059d49d4fbeae463a498faacccf9  corporate/3.0/x86_64/printer-testpages-1.0-138.5.C30mdk.x86_64.rpm
 c536d4e2d9288e75bba62c1960aac700  corporate/3.0/x86_64/printer-utils-1.0-138.5.C30mdk.x86_64.rpm 
 45c844e2b7ec80a9760e54744d037bf8  corporate/3.0/SRPMS/printer-drivers-1.0-138.5.C30mdk.src.rpm

2008.0 x86_64

 500b80761ac353d23731d984def68d92  2008.0/x86_64/ghostscript-8.60-55.2mdv2008.0.x86_64.rpm
 3bab68bda03832898311b25d6c6b0965  2008.0/x86_64/ghostscript-X-8.60-55.2mdv2008.0.x86_64.rpm
 8d99e0abd15cd8b44fb0e06120d349a1  2008.0/x86_64/ghostscript-common-8.60-55.2mdv2008.0.x86_64.rpm
 99b1af93ba073df5eec2fabd799c8d67  2008.0/x86_64/ghostscript-doc-8.60-55.2mdv2008.0.x86_64.rpm
 a2594bed986560418a6cce0ad6f8cf8f  2008.0/x86_64/ghostscript-dvipdf-8.60-55.2mdv2008.0.x86_64.rpm
 3179463b7984f6bacae246fd25c5e3f5  2008.0/x86_64/ghostscript-module-X-8.60-55.2mdv2008.0.x86_64.rpm
 2fdc402ed4634389ba3f50afaded1513  2008.0/x86_64/lib64gs8-8.60-55.2mdv2008.0.x86_64.rpm
 2886de34c01602470cc83db8c9888969  2008.0/x86_64/lib64gs8-devel-8.60-55.2mdv2008.0.x86_64.rpm
 565a37afc54d44c24f8309c1804883d0  2008.0/x86_64/lib64ijs1-0.35-55.2mdv2008.0.x86_64.rpm
 85b9a2494b2818d781688bbb97eeda28  2008.0/x86_64/lib64ijs1-devel-0.35-55.2mdv2008.0.x86_64.rpm 
 e6b171ef6814b45477e23182d9ddf2a7  2008.0/SRPMS/ghostscript-8.60-55.2mdv2008.0.src.rpm

CS3.0 i586

 0740a55ffc51583ece0c3d6a2ec15a4f  corporate/3.0/i586/cups-drivers-1.1-138.5.C30mdk.i586.rpm
 da2dd1210913a6a99575c0f79c38691c  corporate/3.0/i586/foomatic-db-3.0.1-0.20040828.1.5.C30mdk.i586.rpm
 ebb4038eed47554cad5650625e0ae9aa  corporate/3.0/i586/foomatic-db-engine-3.0.1-0.20040828.1.5.C30mdk.i586.rpm
 284b88a6d93768260eabca912516ae57  corporate/3.0/i586/foomatic-filters-3.0.1-0.20040828.1.5.C30mdk.i586.rpm
 55fc4a04e6639dab571812a829dc7a1e  corporate/3.0/i586/ghostscript-7.07-19.5.C30mdk.i586.rpm
 d994fe4547f5715c4acd6eb1dc61193d  corporate/3.0/i586/ghostscript-module-X-7.07-19.5.C30mdk.i586.rpm
 900629317203474f65c061282906212d  corporate/3.0/i586/gimpprint-4.2.7-2.5.C30mdk.i586.rpm
 ee1e4e01f9c21fdf6de1a277fb24ed3f  corporate/3.0/i586/libgimpprint1-4.2.7-2.5.C30mdk.i586.rpm
 d7a1d015ed9891d1561e35e02f81a7a9  corporate/3.0/i586/libgimpprint1-devel-4.2.7-2.5.C30mdk.i586.rpm
 8e7ef9c19423f72e9966fb156a32baca  corporate/3.0/i586/libijs0-0.34-76.5.C30mdk.i586.rpm
 57b58d4e30c79d1d4b7451722cc162da  corporate/3.0/i586/libijs0-devel-0.34-76.5.C30mdk.i586.rpm
 9fab5e7e01363d2255254289b78b3bab  corporate/3.0/i586/printer-filters-1.0-138.5.C30mdk.i586.rpm
 231e989605b33feccfb79ba1fe7d0ec3  corporate/3.0/i586/printer-testpages-1.0-138.5.C30mdk.i586.rpm
 d4893b06e30cffd02a7166a49628ef22  corporate/3.0/i586/printer-utils-1.0-138.5.C30mdk.i586.rpm 
 45c844e2b7ec80a9760e54744d037bf8  corporate/3.0/SRPMS/printer-drivers-1.0-138.5.C30mdk.src.rpm

2008.0 i586

 49b3afcb2d92004226453776f86d17f8  2008.0/i586/ghostscript-8.60-55.2mdv2008.0.i586.rpm
 e2e0127a7511268838d6a72fd64e30cb  2008.0/i586/ghostscript-X-8.60-55.2mdv2008.0.i586.rpm
 2c721049901d8cf168401845bafba9b4  2008.0/i586/ghostscript-common-8.60-55.2mdv2008.0.i586.rpm
 06ad5f88130df04bbe60e36672cc4a9b  2008.0/i586/ghostscript-doc-8.60-55.2mdv2008.0.i586.rpm
 aa6252821371a033bb0f49af4de19bb7  2008.0/i586/ghostscript-dvipdf-8.60-55.2mdv2008.0.i586.rpm
 a3d50d5c5f66ff75de173834d1983add  2008.0/i586/ghostscript-module-X-8.60-55.2mdv2008.0.i586.rpm
 4c8656b63ec3bbd34b71c7597b8a837b  2008.0/i586/libgs8-8.60-55.2mdv2008.0.i586.rpm
 69c92737c6549de960e1bf00de202249  2008.0/i586/libgs8-devel-8.60-55.2mdv2008.0.i586.rpm
 a190981ad1630c4e12a12b8bc4c12473  2008.0/i586/libijs1-0.35-55.2mdv2008.0.i586.rpm
 7f9fa011cff43f74e31e3d93f95c55ce  2008.0/i586/libijs1-devel-0.35-55.2mdv2008.0.i586.rpm 
 e6b171ef6814b45477e23182d9ddf2a7  2008.0/SRPMS/ghostscript-8.60-55.2mdv2008.0.src.rpm

2007.1 x86_64

 041a2281e9eee26da6ebfed6a5afff5d  2007.1/x86_64/ghostscript-8.15-48.1mdv2007.1.x86_64.rpm
 b77a5f0e94637e71c201f309598b6177  2007.1/x86_64/ghostscript-X-8.15-48.1mdv2007.1.x86_64.rpm
 308aebd935159313d40540d16786a541  2007.1/x86_64/ghostscript-common-8.15-48.1mdv2007.1.x86_64.rpm
 4d16151cdfde9be0cb0b58c39252284f  2007.1/x86_64/ghostscript-doc-8.15-48.1mdv2007.1.x86_64.rpm
 396d6d44f50c0fedc9cd835f072b1149  2007.1/x86_64/ghostscript-dvipdf-8.15-48.1mdv2007.1.x86_64.rpm
 37bb1f718fdac868711860cb209388d1  2007.1/x86_64/ghostscript-module-X-8.15-48.1mdv2007.1.x86_64.rpm
 d618f0081f802f928e4575c84525eebb  2007.1/x86_64/lib64gs8-8.15-48.1mdv2007.1.x86_64.rpm
 47347d420281dcc1a1c4fb73fbb9b8dc  2007.1/x86_64/lib64gs8-devel-8.15-48.1mdv2007.1.x86_64.rpm
 57ea6726ce602cbca5bdf2ab1b70b687  2007.1/x86_64/lib64ijs1-0.35-48.1mdv2007.1.x86_64.rpm
 92e04164225636994f9b21c9f97275ed  2007.1/x86_64/lib64ijs1-devel-0.35-48.1mdv2007.1.x86_64.rpm 
 ce698dd8e3d6ffa4dac9c85c6774b705  2007.1/SRPMS/ghostscript-8.15-48.1mdv2007.1.src.rpm

References