<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="742167e27a88dcad3263fc988ddf988e"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2706">
  <id>dbg111-ghostscript-devel</id>
  <title>ghostscript security update</title>
  <release>openSUSE 11.1 DEBUGINFO</release>
  <issued date="1278926794"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=605043" id="605043" title="bug number 605043" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=559122" id="559122" title="bug number 559122" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=608071" id="608071" title="bug number 608071" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1869" id="CVE-2010-1869" title="CVE-2010-1869" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1628" id="CVE-2010-1628" title="CVE-2010-1628" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4270" id="CVE-2009-4270" title="CVE-2009-4270" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2055" id="CVE-2010-2055" title="CVE-2010-2055" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4897" id="CVE-2009-4897" title="CVE-2009-4897" type="cve"/>
  </references>
  <description>Specially crafted postscript (.ps) files could cause buffer
overflows in ghostscript that could potentially be
exploited to execute arbitrary code (CVE-2010-1628,
CVE-2010-1869, CVE-2009-4270)

ghostscript by default read some initialization files from
the current working directory. Local attackers could
potentially exploit that to have other users execute
arbitrary commands by placing such files e.g. in /tmp
(CVE-2010-2055).
</description>
  <pkglist>
    <collection>
        <package name="ghostscript-library-debuginfo" arch="i586" version="8.62" release="31.44.1">
          <filename>ghostscript-library-debuginfo-8.62-31.44.1.i586.rpm</filename>
        </package>
        <package name="ghostscript-library-debuginfo" arch="ppc" version="8.62" release="31.44.1">
          <filename>ghostscript-library-debuginfo-8.62-31.44.1.ppc.rpm</filename>
        </package>
        <package name="ghostscript-library-debuginfo" arch="x86_64" version="8.62" release="31.44.1">
          <filename>ghostscript-library-debuginfo-8.62-31.44.1.x86_64.rpm</filename>
        </package>
        <package name="ghostscript-library-debugsource" arch="i586" version="8.62" release="31.44.1">
          <filename>ghostscript-library-debugsource-8.62-31.44.1.i586.rpm</filename>
        </package>
        <package name="ghostscript-library-debugsource" arch="ppc" version="8.62" release="31.44.1">
          <filename>ghostscript-library-debugsource-8.62-31.44.1.ppc.rpm</filename>
        </package>
        <package name="ghostscript-library-debugsource" arch="x86_64" version="8.62" release="31.44.1">
          <filename>ghostscript-library-debugsource-8.62-31.44.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
