Security update for ghostscript
This update for ghostscript fixes the following issue:
Security issue fixed:
- CVE-2019-3838: Fixed a vulnerability which made forceput operator in DefineResource to be still accessible
which could allow access to file system outside of the constraints of -dSAFER (bsc#1129186).
This update was imported from the SUSE:SLE-15:Update update project.
-
Submitted by
Johannes Meixner (jsmeix)
Fixed bugs
bnc#1129186
VUL-0: EMBARGOED: CVE-2019-3838: ghostscript,ghostscript-library: forceput in DefineResource is still accessible
