Advisories » MGASA-2015-0308

Updated ghostscript package fixes security vulnerability

Publication date: 10 Aug 2015
Modification date: 10 Aug 2015
Type: security
Affected Mageia releases : 4 , 5
CVE: CVE-2015-3228

Description

GhostScript is vulnerable to an integer overflow when processing a crafted
PostScript file using the ps2pdf command (CVE-2015-3228).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=16453
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-3228
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3228

SRPMS

4/core

• ghostscript-9.10-2.1.mga4

5/core

• ghostscript-9.14-3.1.mga5