Security update for ghostscript
This update for ghostscript fixes the following issues:
- CVE-2016-8602: Fixes a NULL dereference in .sethalftone5 (boo#1004237).
- CVE-2013-5653, CVE-2016-7978, CVE-2016-7979: Fix multiple -dsafer related CVE's (boo#1001951).
-
Submitted by
Johannes Meixner (jsmeix)
Fixed bugs
bnc#1004237
VUL-0: CVE-2016-8602: ghostscript, ghostscript-library: Insufficient parameter check in .sethalftone5
bnc#1001951
VUL-0: EMU: CVE-2016-7976, CVE-2016-7977, CVE-2016-7978, CVE-2016-7979: ghostscript,ghostscript-library: getenv and filenameforall ignore -dSAFER, possible RCE
