![]() CVE-2017-8291 - Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via a "/OutputFile (%pipe%" substring in a crafted .eps document that is an input to the gs program, as exploited in the wild in April 2017. For more details, see https://bugzilla.suse.com/show_bug.cgi?id=1036453 Signed-off-by: Peter Korsgaard <peter@korsgaard.com> |
||
---|---|---|
.. | ||
0001-Fix-cross-compilation-issue.patch | ||
0002-Host-tool-mkromfs_1-needs-libz.patch | ||
0003-Bug-697799-have-.eqproc-check-its-parameters.patch | ||
0004-Bug-697799-have-.rsdparams-check-its-parameters.patch | ||
Config.in | ||
ghostscript.hash | ||
ghostscript.mk |