Another reason why Ghostscript issues have not been fixed is because
there are still issues. :-(
Today Tavis Ormandy posted a shell exploit to the oss-security list
which still works (executes an arbitrary Unix shell command due to
opening a Postscript file with 'evince') with the latest development
Ghostscript.
Bob
--
Bob Friesenhahn
[email protected], http://www.simplesystems.org/users/bfriesen/
GraphicsMagick Maintainer, http://www.GraphicsMagick.org/
_______________________________________________
openindiana-discuss mailing list
[email protected]
https://openindiana.org/mailman/listinfo/openindiana-discuss
