Fwd: [Redhat-Bug 599168] New: Ghostscript is vulnerable to CVE-2010-2055

[Markus Steinborn]

As AFAIK every upstream version is vulnerable, GNU ghostscript is
vulnerable, too.
.

Summary: Ghostscript is vulnerable to CVE-2010-2055

https://bugzilla.redhat.com/show_bug.cgi?id=599168

Summary: Ghostscript is vulnerable to CVE-2010-2055
Platform: All
OS/Version: Linux
Severity: urgent
Priority: low

AFAIK all versions of Ghostscript are vulnerable.

> From version 8.64 (upstreamn without patches) up to current svn head things are
even worse: The security option "-P-" is not working properly. See

https://bugzilla.novell.com/show_bug.cgi?id=608071

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583183

and https://bugzilla.redhat.com/show_bug.cgi?id=599168

for details.

Greetings

Markus Steinborn
GNU gv maintainer