oss-sec mailing list archives

Re: Re: More Ghostscript Issues: Should we disable PS coders in policy.xml by default?


From: Leonardo Taccari <iamleot () gmail com>
Date: Wed, 22 Aug 2018 23:36:44 +0200

Hello Bob,

Bob Friesenhahn writes:
The CERT advisory at https://www.kb.cert.org/vuls/id/332928 provides a 
policy.xml example which does not appear to block PS2 and PS3, which 
are also entry points for reading Postscript.
[...]

If I am not missing something I think that ghostscript isn't used
for them though.


Current thread: