Security update for ghostscript-library SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:1140-1 Final 1 1 2018-05-03T09:18:19Z current 2018-05-03T09:18:19Z 2018-05-03T09:18:19Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for ghostscript-library This update for ghostscript-library fixes several issues. These security issues were fixed: - CVE-2017-7207: The mem_get_bits_rectangle function allowed remote attackers to cause a denial of service (NULL pointer dereference) via a crafted PostScript document (bsc#1030263). - CVE-2016-9601: Prevent heap-buffer overflow by checking for an integer overflow in jbig2_image_new function (bsc#1018128). - CVE-2017-9612: The Ins_IP function in base/ttinterp.c allowed remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via a crafted document (bsc#1050891) - CVE-2017-9726: The Ins_MDRP function in base/ttinterp.c allowed remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document (bsc#1050889) - CVE-2017-9727: The gx_ttfReader__Read function in base/gxttfb.c allowed remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document (bsc#1050888) - CVE-2017-9739: The Ins_JMPR function in base/ttinterp.c allowed remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document (bsc#1050887) - CVE-2017-11714: psi/ztoken.c mishandled references to the scanner state structure, which allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PostScript document, related to an out-of-bounds read in the igc_reloc_struct_ptr function in psi/igc.c (bsc#1051184) - CVE-2017-9835: The gs_alloc_ref_array function allowed remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted PostScript document (bsc#1050879) - CVE-2016-10219: The intersect function in base/gxfill.c allowed remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted file (bsc#1032138) - CVE-2017-9216: Prevent NULL pointer dereference in the jbig2_huffman_get function in jbig2_huffman.c which allowed for DoS (bsc#1040643) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp4-ghostscript-library-13588,slessp4-ghostscript-library-13588 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20181140-1/ Link for SUSE-SU-2018:1140-1 https://lists.suse.com/pipermail/sle-security-updates/2018-May/003973.html E-Mail link for SUSE-SU-2018:1140-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1018128 SUSE Bug 1018128 https://bugzilla.suse.com/1030263 SUSE Bug 1030263 https://bugzilla.suse.com/1032138 SUSE Bug 1032138 https://bugzilla.suse.com/1032230 SUSE Bug 1032230 https://bugzilla.suse.com/1040643 SUSE Bug 1040643 https://bugzilla.suse.com/1050879 SUSE Bug 1050879 https://bugzilla.suse.com/1050887 SUSE Bug 1050887 https://bugzilla.suse.com/1050888 SUSE Bug 1050888 https://bugzilla.suse.com/1050889 SUSE Bug 1050889 https://bugzilla.suse.com/1050891 SUSE Bug 1050891 https://bugzilla.suse.com/1051184 SUSE Bug 1051184 https://www.suse.com/security/cve/CVE-2016-10219/ SUSE CVE CVE-2016-10219 page https://www.suse.com/security/cve/CVE-2016-9601/ SUSE CVE CVE-2016-9601 page https://www.suse.com/security/cve/CVE-2017-11714/ SUSE CVE CVE-2017-11714 page https://www.suse.com/security/cve/CVE-2017-7207/ SUSE CVE CVE-2017-7207 page https://www.suse.com/security/cve/CVE-2017-9216/ SUSE CVE CVE-2017-9216 page https://www.suse.com/security/cve/CVE-2017-9612/ SUSE CVE CVE-2017-9612 page https://www.suse.com/security/cve/CVE-2017-9726/ SUSE CVE CVE-2017-9726 page https://www.suse.com/security/cve/CVE-2017-9727/ SUSE CVE CVE-2017-9727 page https://www.suse.com/security/cve/CVE-2017-9739/ SUSE CVE CVE-2017-9739 page https://www.suse.com/security/cve/CVE-2017-9835/ SUSE CVE CVE-2017-9835 page SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 ghostscript-devel-8.62-32.47.7.1 ghostscript-ijs-devel-8.62-32.47.7.1 libgimpprint-devel-4.2.7-32.47.7.1 ghostscript-fonts-other-8.62-32.47.7.1 ghostscript-fonts-rus-8.62-32.47.7.1 ghostscript-fonts-std-8.62-32.47.7.1 ghostscript-library-8.62-32.47.7.1 ghostscript-omni-8.62-32.47.7.1 ghostscript-x11-8.62-32.47.7.1 libgimpprint-4.2.7-32.47.7.1 ghostscript-fonts-other-8.62-32.47.7.1 as a component of SUSE Linux Enterprise Server 11 SP4 ghostscript-fonts-rus-8.62-32.47.7.1 as a component of SUSE Linux Enterprise Server 11 SP4 ghostscript-fonts-std-8.62-32.47.7.1 as a component of SUSE Linux Enterprise Server 11 SP4 ghostscript-library-8.62-32.47.7.1 as a component of SUSE Linux Enterprise Server 11 SP4 ghostscript-omni-8.62-32.47.7.1 as a component of SUSE Linux Enterprise Server 11 SP4 ghostscript-x11-8.62-32.47.7.1 as a component of SUSE Linux Enterprise Server 11 SP4 libgimpprint-4.2.7-32.47.7.1 as a component of SUSE Linux Enterprise Server 11 SP4 ghostscript-fonts-other-8.62-32.47.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 ghostscript-fonts-rus-8.62-32.47.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 ghostscript-fonts-std-8.62-32.47.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 ghostscript-library-8.62-32.47.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 ghostscript-omni-8.62-32.47.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 ghostscript-x11-8.62-32.47.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libgimpprint-4.2.7-32.47.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 ghostscript-devel-8.62-32.47.7.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ghostscript-ijs-devel-8.62-32.47.7.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libgimpprint-devel-4.2.7-32.47.7.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 The intersect function in base/gxfill.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted file. CVE-2016-10219 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-other-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-rus-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-std-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-library-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-omni-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-x11-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:libgimpprint-4.2.7-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-other-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-rus-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-std-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-library-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-omni-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-x11-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libgimpprint-4.2.7-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ghostscript-devel-8.62-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ghostscript-ijs-devel-8.62-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libgimpprint-devel-4.2.7-32.47.7.1 low 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181140-1/ https://www.suse.com/security/cve/CVE-2016-10219.html CVE-2016-10219 https://bugzilla.suse.com/1032138 SUSE Bug 1032138 ghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in the ghostscript jbig2_decode_gray_scale_image function which is used to decode halftone segments in a JBIG2 image. A document (PostScript or PDF) with an embedded, specially crafted, jbig2 image could trigger a segmentation fault in ghostscript. CVE-2016-9601 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-other-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-rus-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-std-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-library-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-omni-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-x11-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:libgimpprint-4.2.7-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-other-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-rus-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-std-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-library-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-omni-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-x11-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libgimpprint-4.2.7-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ghostscript-devel-8.62-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ghostscript-ijs-devel-8.62-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libgimpprint-devel-4.2.7-32.47.7.1 low 3.3 AV:L/AC:M/Au:N/C:N/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181140-1/ https://www.suse.com/security/cve/CVE-2016-9601.html CVE-2016-9601 https://bugzilla.suse.com/1018128 SUSE Bug 1018128 https://bugzilla.suse.com/1036453 SUSE Bug 1036453 psi/ztoken.c in Artifex Ghostscript 9.21 mishandles references to the scanner state structure, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PostScript document, related to an out-of-bounds read in the igc_reloc_struct_ptr function in psi/igc.c. CVE-2017-11714 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-other-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-rus-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-std-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-library-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-omni-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-x11-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:libgimpprint-4.2.7-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-other-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-rus-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-std-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-library-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-omni-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-x11-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libgimpprint-4.2.7-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ghostscript-devel-8.62-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ghostscript-ijs-devel-8.62-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libgimpprint-devel-4.2.7-32.47.7.1 important 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181140-1/ https://www.suse.com/security/cve/CVE-2017-11714.html CVE-2017-11714 https://bugzilla.suse.com/1051184 SUSE Bug 1051184 The mem_get_bits_rectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted PostScript document. CVE-2017-7207 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-other-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-rus-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-std-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-library-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-omni-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-x11-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:libgimpprint-4.2.7-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-other-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-rus-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-std-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-library-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-omni-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-x11-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libgimpprint-4.2.7-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ghostscript-devel-8.62-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ghostscript-ijs-devel-8.62-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libgimpprint-devel-4.2.7-32.47.7.1 low 1.5 AV:L/AC:M/Au:S/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181140-1/ https://www.suse.com/security/cve/CVE-2017-7207.html CVE-2017-7207 https://bugzilla.suse.com/1030263 SUSE Bug 1030263 https://bugzilla.suse.com/1036453 SUSE Bug 1036453 libjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and Ghostscript, has a NULL pointer dereference in the jbig2_huffman_get function in jbig2_huffman.c. For example, the jbig2dec utility will crash (segmentation fault) when parsing an invalid file. CVE-2017-9216 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-other-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-rus-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-std-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-library-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-omni-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-x11-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:libgimpprint-4.2.7-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-other-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-rus-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-std-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-library-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-omni-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-x11-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libgimpprint-4.2.7-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ghostscript-devel-8.62-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ghostscript-ijs-devel-8.62-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libgimpprint-devel-4.2.7-32.47.7.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181140-1/ https://www.suse.com/security/cve/CVE-2017-9216.html CVE-2017-9216 https://bugzilla.suse.com/1040643 SUSE Bug 1040643 The Ins_IP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via a crafted document. CVE-2017-9612 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-other-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-rus-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-std-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-library-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-omni-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-x11-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:libgimpprint-4.2.7-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-other-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-rus-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-std-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-library-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-omni-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-x11-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libgimpprint-4.2.7-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ghostscript-devel-8.62-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ghostscript-ijs-devel-8.62-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libgimpprint-devel-4.2.7-32.47.7.1 important 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181140-1/ https://www.suse.com/security/cve/CVE-2017-9612.html CVE-2017-9612 https://bugzilla.suse.com/1050891 SUSE Bug 1050891 The Ins_MDRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document. CVE-2017-9726 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-other-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-rus-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-std-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-library-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-omni-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-x11-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:libgimpprint-4.2.7-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-other-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-rus-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-std-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-library-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-omni-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-x11-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libgimpprint-4.2.7-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ghostscript-devel-8.62-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ghostscript-ijs-devel-8.62-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libgimpprint-devel-4.2.7-32.47.7.1 important 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181140-1/ https://www.suse.com/security/cve/CVE-2017-9726.html CVE-2017-9726 https://bugzilla.suse.com/1050889 SUSE Bug 1050889 The gx_ttfReader__Read function in base/gxttfb.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document. CVE-2017-9727 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-other-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-rus-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-std-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-library-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-omni-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-x11-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:libgimpprint-4.2.7-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-other-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-rus-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-std-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-library-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-omni-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-x11-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libgimpprint-4.2.7-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ghostscript-devel-8.62-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ghostscript-ijs-devel-8.62-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libgimpprint-devel-4.2.7-32.47.7.1 important 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181140-1/ https://www.suse.com/security/cve/CVE-2017-9727.html CVE-2017-9727 https://bugzilla.suse.com/1050888 SUSE Bug 1050888 The Ins_JMPR function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document. CVE-2017-9739 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-other-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-rus-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-std-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-library-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-omni-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-x11-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:libgimpprint-4.2.7-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-other-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-rus-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-std-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-library-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-omni-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-x11-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libgimpprint-4.2.7-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ghostscript-devel-8.62-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ghostscript-ijs-devel-8.62-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libgimpprint-devel-4.2.7-32.47.7.1 important 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181140-1/ https://www.suse.com/security/cve/CVE-2017-9739.html CVE-2017-9739 https://bugzilla.suse.com/1050887 SUSE Bug 1050887 The gs_alloc_ref_array function in psi/ialloc.c in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted PostScript document. This is related to a lack of an integer overflow check in base/gsalloc.c. CVE-2017-9835 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-other-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-rus-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-std-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-library-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-omni-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-x11-8.62-32.47.7.1 SUSE Linux Enterprise Server 11 SP4:libgimpprint-4.2.7-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-other-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-rus-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-fonts-std-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-library-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-omni-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ghostscript-x11-8.62-32.47.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libgimpprint-4.2.7-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ghostscript-devel-8.62-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ghostscript-ijs-devel-8.62-32.47.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libgimpprint-devel-4.2.7-32.47.7.1 important 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181140-1/ https://www.suse.com/security/cve/CVE-2017-9835.html CVE-2017-9835 https://bugzilla.suse.com/1050879 SUSE Bug 1050879