[OpenIndiana-discuss] ghostscript / ImageMagick security problems
Bob Friesenhahn
bfriesen at simple.dallas.tx.us
Wed Aug 29 20:44:43 UTC 2018
Another reason why Ghostscript issues have not been fixed is because
there are still issues. :-(
Today Tavis Ormandy posted a shell exploit to the oss-security list
which still works (executes an arbitrary Unix shell command due to
opening a Postscript file with 'evince') with the latest development
Ghostscript.
Bob
--
Bob Friesenhahn
bfriesen at simple.dallas.tx.us, http://www.simplesystems.org/users/bfriesen/
GraphicsMagick Maintainer, http://www.GraphicsMagick.org/
More information about the openindiana-discuss
mailing list