Gentoo: ghostscript Insecure temp file
ps2epsi uses an insecurely created file to execute ghostscript
Summary
- - --------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT 200306-08 - - ---------------------------------------------------------------------
- - ---------------------------------------------------------------------
ps2epsi uses an insecurely created file to execute ghostscript. This could result in overwritten files for the user who is invoking ps2epsi.
SOLUTION
It is recommended that all Gentoo Linux users who are running app-text/ghostscript upgrade to ghostscript-7.05.6-r2 as follows
emerge sync emerge ghostscript emerge clean
- - --------------------------------------------------------------------- aliz@gentoo.org - GnuPG key is available at - - ---------------------------------------------------------------------
Resolution
References
Availability
Concerns
Severity
PACKAGE : ghostscript
SUMMARY : insecure temporary file
DATE : 2003-06-14 19:29 UTC
EXPLOIT : local
VERSIONS AFFECTED : =ghostscript-7.05.6-r2
CVE : CAN-2003-0354
Background
