Mailinglist Archive: opensuse-bugs (5379 mails)

< Previous Next >
[Bug 608071] VUL-0: ghostscript: executes random code on startup (does not verify ownership of sensitive files used)
  • From: bugzilla_noreply@xxxxxxxxxx
  • Date: Tue, 8 Jun 2010 13:04:56 +0000
  • Message-id: <20100608130456.61EAD245520@xxxxxxxxxxxxxxxxxxxxxx>
http://bugzilla.novell.com/show_bug.cgi?id=608071

http://bugzilla.novell.com/show_bug.cgi?id=608071#c40


--- Comment #40 from Dr. Werner Fink <werner@xxxxxxxxxx> 2010-06-08 13:04:53
UTC ---
Fronm changelog:

Tue Jun 8 14:55:24 CEST 2010 - werner@xxxxxxx
- Modify pdf2des to make it work with newer gv (bnc#610933)
- Compile ghostscript-library with SEARCH_HERE_FIRST=0 to close
vulnerability due reading startup file even from temporary
directories (make option -P- to the default) (bnc#608071)

.. please note that ghostscript-min behaves to old way. This was submitted
to factory.

--
Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

< Previous Next >