Oracle alert ELSA-2018-3650 (ghostscript)

From:
             
 
Errata Announcements for Oracle Linux <el-errata@oss.oracle.com> 
To:
             
 
el-errata@oss.oracle.com 
Subject:
             
 
[El-errata] ELSA-2018-3650 Important: Oracle Linux 7 ghostscript security update (aarch64) 
Date:
             
 
Mon, 26 Nov 2018 19:07:54 -0800
Message-ID:
             
 
<4411f4c2-c6e3-7ffa-b907-db0e44f87313@oracle.com>
Oracle Linux Security Advisory ELSA-2018-3650

http://linux.oracle.com/errata/ELSA-2018-3650.html

The following updated rpms for Oracle Linux 7 have been uploaded to the 
Unbreakable Linux Network:

aarch64:
ghostscript-9.07-31.el7_6.1.aarch64.rpm
ghostscript-cups-9.07-31.el7_6.1.aarch64.rpm
ghostscript-devel-9.07-31.el7_6.1.aarch64.rpm
ghostscript-doc-9.07-31.el7_6.1.noarch.rpm
ghostscript-gtk-9.07-31.el7_6.1.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/ghostscript-9.07-...



Description of changes:

[9.07-31.el7_6.1]
- Remove as many non-standard operators as possible to make the codebase
   closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in 
type
   checker (699659)
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
   issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
   type checking (699660)


_______________________________________________
El-errata mailing list
El-errata@oss.oracle.com
https://oss.oracle.com/mailman/listinfo/el-errata