[OpenIndiana-discuss] ghostscript / ImageMagick security problems

Bob Friesenhahn bfriesen at simple.dallas.tx.us
Wed Aug 29 20:44:43 UTC 2018


Another reason why Ghostscript issues have not been fixed is because 
there are still issues. :-(

Today Tavis Ormandy posted a shell exploit to the oss-security list 
which still works (executes an arbitrary Unix shell command due to 
opening a Postscript file with 'evince') with the latest development 
Ghostscript.

Bob
-- 
Bob Friesenhahn
bfriesen at simple.dallas.tx.us, http://www.simplesystems.org/users/bfriesen/
GraphicsMagick Maintainer,    http://www.GraphicsMagick.org/



More information about the openindiana-discuss mailing list