Another reason why Ghostscript issues have not been fixed is because
there are still issues. :-(
Today Tavis Ormandy posted a shell exploit to the oss-security list
which still works (executes an arbitrary Unix shell command due to
opening a Postscript file with 'evince') with the latest development
Ghostscript.
Bob
--
Bob Friesenhahn
bfrie...@simple.dallas.tx.us, http://www.simplesystems.org/users/bfriesen/
GraphicsMagick Maintainer, http://www.GraphicsMagick.org/
_______________________________________________
openindiana-discuss mailing list
openindiana-discuss@openindiana.org
https://openindiana.org/mailman/listinfo/openindiana-discuss
