Oval Definition:
oval:org.mitre.oval:def:25285
Revision Date
:
2014-09-08
Version
:
3
Title
:
SUSE-SU-2014:0581-1 -- Security update for a2ps
Description
:
The text to postscript converter a2ps received a securityupdate.The fixps script did not call ghostscript with the -DSAFERoption, allowing command execution by attacker suppliedpostscript files.Security Issue reference: * CVE-2014-0466
Family
:
unix
Class
:
patch
Status
:
ACCEPTED
Reference(s)
:
CVE-2014-0466
SUSE-SU-2014:0581-1
Platform(s)
:
SUSE Linux Enterprise Desktop 11
SUSE Linux Enterprise Server 11
Product(s)
:
a2ps
Definition Synopsis
Operation system section
SUSE Linux Enterprise Server 11.x is installed
OR
SUSE Linux Enterprise Desktop 11.x is installed
AND
a2ps RPM is earlier than 0:4.13-1326.37.1
BACK