Security update for ghostscript

Announcement ID:	SUSE-SU-2018:0407-1
Rating:	moderate
References:	bsc#1032138 bsc#1032230 bsc#1040643 bsc#1050879 bsc#1050887 bsc#1050888 bsc#1050889 bsc#1050891 bsc#1051184
Cross-References:	CVE-2016-10219 CVE-2016-10317 CVE-2017-11714 CVE-2017-9216 CVE-2017-9612 CVE-2017-9726 CVE-2017-9727 CVE-2017-9739 CVE-2017-9835
CVSS scores:	CVE-2016-10219 ( NVD ): 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2016-10317 ( SUSE ): 5.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2016-10317 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2017-11714 ( SUSE ): 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2017-11714 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2017-9216 ( SUSE ): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2017-9216 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-9612 ( SUSE ): 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2017-9612 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2017-9726 ( SUSE ): 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2017-9726 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2017-9727 ( SUSE ): 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2017-9727 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2017-9739 ( SUSE ): 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2017-9739 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2017-9835 ( SUSE ): 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2017-9835 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products:	SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise High Performance Computing 12 SP2 SUSE Linux Enterprise High Performance Computing 12 SP3 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for the Raspberry Pi 12-SP2 SUSE Linux Enterprise Software Bootstrap Kit 12 12-SP3 SUSE Linux Enterprise Software Bootstrap Kit 12 12-SP2 SUSE Linux Enterprise Software Development Kit 12 12-SP2 SUSE Linux Enterprise Software Development Kit 12 SP3

An update that solves nine vulnerabilities can now be installed.

Description:

This update for ghostscript fixes several issues.

These security issues were fixed:

• CVE-2017-9835: The gs_alloc_ref_array function allowed remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted PostScript document (bsc#1050879).
• CVE-2017-9216: Prevent NULL pointer dereference in the jbig2_huffman_get function in jbig2_huffman.c which allowed for DoS (bsc#1040643).
• CVE-2016-10317: The fill_threshhold_buffer function in base/gxht_thresh.c allowed remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted PostScript document (bsc#1032230).
• CVE-2017-9612: The Ins_IP function in base/ttinterp.c allowed remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via a crafted document (bsc#1050891).
• CVE-2017-9726: The Ins_MDRP function in base/ttinterp.c allowed remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document (bsc#1050889).
• CVE-2017-9727: The gx_ttfReader__Read function in base/gxttfb.c allowed remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document (bsc#1050888).
• CVE-2017-9739: The Ins_JMPR function in base/ttinterp.c allowed remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document (bsc#1050887).
• CVE-2017-11714: psi/ztoken.c mishandled references to the scanner state structure, which allowed remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PostScript document, related to an out-of-bounds read in the igc_reloc_struct_ptr function in psi/igc.c (bsc#1051184).
• CVE-2016-10219: The intersect function in base/gxfill.c allowed remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted file (bsc#1032138).

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

• SUSE Linux Enterprise Software Bootstrap Kit 12 12-SP2
  zypper in -t patch SUSE-SLE-BSK-12-SP2-2018-277=1
• SUSE Linux Enterprise Software Bootstrap Kit 12 12-SP3
  zypper in -t patch SUSE-SLE-BSK-12-SP3-2018-277=1
• SUSE Linux Enterprise Desktop 12 SP2
  zypper in -t patch SUSE-SLE-DESKTOP-12-SP2-2018-277=1
• SUSE Linux Enterprise Desktop 12 SP3
  zypper in -t patch SUSE-SLE-DESKTOP-12-SP3-2018-277=1
• SUSE Linux Enterprise Server for the Raspberry Pi 12-SP2
  zypper in -t patch SUSE-SLE-RPI-12-SP2-2018-277=1
• SUSE Linux Enterprise Software Development Kit 12 12-SP2
  zypper in -t patch SUSE-SLE-SDK-12-SP2-2018-277=1
• SUSE Linux Enterprise Software Development Kit 12 SP3
  zypper in -t patch SUSE-SLE-SDK-12-SP3-2018-277=1
• SUSE Linux Enterprise High Performance Computing 12 SP2
  zypper in -t patch SUSE-SLE-SERVER-12-SP2-2018-277=1
• SUSE Linux Enterprise Server 12 SP2
  zypper in -t patch SUSE-SLE-SERVER-12-SP2-2018-277=1
• SUSE Linux Enterprise Server for SAP Applications 12 SP2
  zypper in -t patch SUSE-SLE-SERVER-12-SP2-2018-277=1
• SUSE Linux Enterprise Server 12 SP3
  zypper in -t patch SUSE-SLE-SERVER-12-SP3-2018-277=1
• SUSE Linux Enterprise High Performance Computing 12 SP3
  zypper in -t patch SUSE-SLE-SERVER-12-SP3-2018-277=1
• SUSE Linux Enterprise Server for SAP Applications 12 SP3
  zypper in -t patch SUSE-SLE-SERVER-12-SP3-2018-277=1

Package List:

• SUSE Linux Enterprise Software Bootstrap Kit 12 12-SP2 (ppc64le s390x x86_64)
  • ghostscript-mini-debugsource-9.15-23.7.1
  • ghostscript-mini-debuginfo-9.15-23.7.1
  • ghostscript-mini-devel-9.15-23.7.1
  • ghostscript-mini-9.15-23.7.1
• SUSE Linux Enterprise Software Bootstrap Kit 12 12-SP3 (ppc64le s390x x86_64)
  • ghostscript-mini-debugsource-9.15-23.7.1
  • ghostscript-mini-debuginfo-9.15-23.7.1
  • ghostscript-mini-devel-9.15-23.7.1
  • ghostscript-mini-9.15-23.7.1
• SUSE Linux Enterprise Desktop 12 SP2 (x86_64)
  • ghostscript-debugsource-9.15-23.7.1
  • ghostscript-x11-debuginfo-9.15-23.7.1
  • ghostscript-9.15-23.7.1
  • ghostscript-debuginfo-9.15-23.7.1
  • ghostscript-x11-9.15-23.7.1
• SUSE Linux Enterprise Desktop 12 SP3 (x86_64)
  • ghostscript-debugsource-9.15-23.7.1
  • ghostscript-x11-debuginfo-9.15-23.7.1
  • ghostscript-9.15-23.7.1
  • ghostscript-debuginfo-9.15-23.7.1
  • ghostscript-x11-9.15-23.7.1
• SUSE Linux Enterprise Server for the Raspberry Pi 12-SP2 (aarch64)
  • ghostscript-debugsource-9.15-23.7.1
  • ghostscript-x11-debuginfo-9.15-23.7.1
  • ghostscript-9.15-23.7.1
  • ghostscript-debuginfo-9.15-23.7.1
  • ghostscript-x11-9.15-23.7.1
• SUSE Linux Enterprise Software Development Kit 12 12-SP2 (aarch64 ppc64le s390x x86_64)
  • ghostscript-debugsource-9.15-23.7.1
  • ghostscript-devel-9.15-23.7.1
  • ghostscript-debuginfo-9.15-23.7.1
• SUSE Linux Enterprise Software Development Kit 12 SP3 (aarch64 ppc64le s390x x86_64)
  • ghostscript-debugsource-9.15-23.7.1
  • ghostscript-devel-9.15-23.7.1
  • ghostscript-debuginfo-9.15-23.7.1
• SUSE Linux Enterprise High Performance Computing 12 SP2 (aarch64 x86_64)
  • ghostscript-debugsource-9.15-23.7.1
  • ghostscript-x11-debuginfo-9.15-23.7.1
  • ghostscript-9.15-23.7.1
  • ghostscript-debuginfo-9.15-23.7.1
  • ghostscript-x11-9.15-23.7.1
• SUSE Linux Enterprise Server 12 SP2 (aarch64 ppc64le s390x x86_64)
  • ghostscript-debugsource-9.15-23.7.1
  • ghostscript-x11-debuginfo-9.15-23.7.1
  • ghostscript-9.15-23.7.1
  • ghostscript-debuginfo-9.15-23.7.1
  • ghostscript-x11-9.15-23.7.1
• SUSE Linux Enterprise Server for SAP Applications 12 SP2 (ppc64le x86_64)
  • ghostscript-debugsource-9.15-23.7.1
  • ghostscript-x11-debuginfo-9.15-23.7.1
  • ghostscript-9.15-23.7.1
  • ghostscript-debuginfo-9.15-23.7.1
  • ghostscript-x11-9.15-23.7.1
• SUSE Linux Enterprise Server 12 SP3 (aarch64 ppc64le s390x x86_64)
  • ghostscript-debugsource-9.15-23.7.1
  • ghostscript-x11-debuginfo-9.15-23.7.1
  • ghostscript-9.15-23.7.1
  • ghostscript-debuginfo-9.15-23.7.1
  • ghostscript-x11-9.15-23.7.1
• SUSE Linux Enterprise High Performance Computing 12 SP3 (aarch64 x86_64)
  • ghostscript-debugsource-9.15-23.7.1
  • ghostscript-x11-debuginfo-9.15-23.7.1
  • ghostscript-9.15-23.7.1
  • ghostscript-debuginfo-9.15-23.7.1
  • ghostscript-x11-9.15-23.7.1
• SUSE Linux Enterprise Server for SAP Applications 12 SP3 (ppc64le x86_64)
  • ghostscript-debugsource-9.15-23.7.1
  • ghostscript-x11-debuginfo-9.15-23.7.1
  • ghostscript-9.15-23.7.1
  • ghostscript-debuginfo-9.15-23.7.1
  • ghostscript-x11-9.15-23.7.1

References:

• https://www.suse.com/security/cve/CVE-2016-10219.html
• https://www.suse.com/security/cve/CVE-2016-10317.html
• https://www.suse.com/security/cve/CVE-2017-11714.html
• https://www.suse.com/security/cve/CVE-2017-9216.html
• https://www.suse.com/security/cve/CVE-2017-9612.html
• https://www.suse.com/security/cve/CVE-2017-9726.html
• https://www.suse.com/security/cve/CVE-2017-9727.html
• https://www.suse.com/security/cve/CVE-2017-9739.html
• https://www.suse.com/security/cve/CVE-2017-9835.html
• https://bugzilla.suse.com/show_bug.cgi?id=1032138
• https://bugzilla.suse.com/show_bug.cgi?id=1032230
• https://bugzilla.suse.com/show_bug.cgi?id=1040643
• https://bugzilla.suse.com/show_bug.cgi?id=1050879
• https://bugzilla.suse.com/show_bug.cgi?id=1050887
• https://bugzilla.suse.com/show_bug.cgi?id=1050888
• https://bugzilla.suse.com/show_bug.cgi?id=1050889
• https://bugzilla.suse.com/show_bug.cgi?id=1050891
• https://bugzilla.suse.com/show_bug.cgi?id=1051184