Bug Fix Advisory ghostscript bug fix update

Advisory: RHBA-2009:1257-1
Type: Bug Fix Advisory
Severity: N/A
Issued on: 2009-09-02
Last updated on: 2009-09-02
Affected Products: RHEL Desktop Workstation (v. 5 client)
Red Hat Enterprise Linux (v. 5 server)
Red Hat Enterprise Linux Desktop (v. 5 client)
OVAL: N/A

Details

A ghostscript update that fixes several bugs is now available.

The Ghostscript suite provides a PostScript(TM) interpreter, a set of C
procedures (the Ghostscript library, which implements the graphics
capabilities in the PostScript language), and an interpreter for PDF files.
Ghostscript translates PostScript code into many common, bitmapped formats,
like those understood by most printers and displays. This enables users to
display PostScript files and print them on non-PostScript printers.

This update applies the following fixes:

* an incorrect offset computation that occurred when handling subglyphs
made it possible for ghostscript to read uninitialized data. When this
occurred, ghostscript would crash with a segmentation fault. This update
corrects the offset computation, preventing ghostscript from reading
uninitialized data. (BZ#450717)

* the way that the Ghostscript source code used pointer aliasing could
produce unexpected results when strict aliasing optimizations are in use.
To avoid problems, this ghostscript update was built using the
-fno-strict-aliasing option, which disables strict aliasing optimization.
(BZ#465960)

* a typographical error in the gsiparam.h header file made it possible for
some PDF files to cause ghostscript to fall into an infinite loop. This
update fixes the error. (BZ#473889)

* the gdevpsu.c source file incorrectly defined the point size of A3 pages,
which sometimes resulted in incorrect document page sizes. This update
fixes the point size definition error , ensuring that A3 pages are always
printed with the correct size. (BZ#480978)

* this update corrects how the cvrs PostScript operator performs sign
extensions. This fix prevents range errors from occurring on 64-bit
platforms. (BZ#488127)

* this update also fixes ColorSpace initialization in the InkJet Server
(IJS) driver, which is used by hpijs and gimp-print drivers in some
configurations. In previous releases, print jobs that did not initialize
ColorSpace failed whenever they used Ghostscript to render and print PDFs
on devices that used the ijs driver. (BZ#504254)

Users of ghostscript are advised to apply this update.


Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Updated packages

RHEL Desktop Workstation (v. 5 client)

SRPMS:
ghostscript-8.15.2-9.11.el5.src.rpm     952177d204421ae2f9e953a45c711c41
 
IA-32:
ghostscript-devel-8.15.2-9.11.el5.i386.rpm     2f506003b4efce4c6e420499498fad8d
 
x86_64:
ghostscript-devel-8.15.2-9.11.el5.i386.rpm     2f506003b4efce4c6e420499498fad8d
ghostscript-devel-8.15.2-9.11.el5.x86_64.rpm     320c8b5d8f3a29d2854f0b5bbb6c540d
 
Red Hat Enterprise Linux (v. 5 server)

SRPMS:
ghostscript-8.15.2-9.11.el5.src.rpm     952177d204421ae2f9e953a45c711c41
 
IA-32:
ghostscript-8.15.2-9.11.el5.i386.rpm     aafcd92518199b219b33e983710062c8
ghostscript-devel-8.15.2-9.11.el5.i386.rpm     2f506003b4efce4c6e420499498fad8d
ghostscript-gtk-8.15.2-9.11.el5.i386.rpm     84d4ecb03532cd079c577df49f749db1
 
IA-64:
ghostscript-8.15.2-9.11.el5.ia64.rpm     019ac06f0f71851b55a460daa9bc66da
ghostscript-devel-8.15.2-9.11.el5.ia64.rpm     edf0180bf458cb693050ab0bd5bb3d90
ghostscript-gtk-8.15.2-9.11.el5.ia64.rpm     e1cd247106a146c75878856316c97d19
 
PPC:
ghostscript-8.15.2-9.11.el5.ppc.rpm     6a1f2a8814aed4f7117775b3a92e4523
ghostscript-8.15.2-9.11.el5.ppc64.rpm     1108c6cbb48c93a30d39681e101d2c7c
ghostscript-devel-8.15.2-9.11.el5.ppc.rpm     95984455e9eed1089960d444d4d09beb
ghostscript-devel-8.15.2-9.11.el5.ppc64.rpm     eb03b8ca079b81df78edd95d77382102
ghostscript-gtk-8.15.2-9.11.el5.ppc.rpm     2ad8de4d537216ccd51b87ceda990939
 
s390x:
ghostscript-8.15.2-9.11.el5.s390.rpm     0bc01b811065382586553ef9753253b1
ghostscript-8.15.2-9.11.el5.s390x.rpm     4911b044438956295016332e432feb38
ghostscript-devel-8.15.2-9.11.el5.s390.rpm     0a31bfc0aad493304ba2eae0ef713597
ghostscript-devel-8.15.2-9.11.el5.s390x.rpm     ffa1189b2d6eb8a8dbc241df16a3fa6f
ghostscript-gtk-8.15.2-9.11.el5.s390x.rpm     e7417d312b3715b60ea6cd276af0910e
 
x86_64:
ghostscript-8.15.2-9.11.el5.i386.rpm     aafcd92518199b219b33e983710062c8
ghostscript-8.15.2-9.11.el5.x86_64.rpm     0eeb2c6c2c0dbdfe9b513e07fa83974d
ghostscript-devel-8.15.2-9.11.el5.i386.rpm     2f506003b4efce4c6e420499498fad8d
ghostscript-devel-8.15.2-9.11.el5.x86_64.rpm     320c8b5d8f3a29d2854f0b5bbb6c540d
ghostscript-gtk-8.15.2-9.11.el5.x86_64.rpm     cfa66e48b6c426b2c543dbbfce89235a
 
Red Hat Enterprise Linux Desktop (v. 5 client)

SRPMS:
ghostscript-8.15.2-9.11.el5.src.rpm     952177d204421ae2f9e953a45c711c41
 
IA-32:
ghostscript-8.15.2-9.11.el5.i386.rpm     aafcd92518199b219b33e983710062c8
ghostscript-gtk-8.15.2-9.11.el5.i386.rpm     84d4ecb03532cd079c577df49f749db1
 
x86_64:
ghostscript-8.15.2-9.11.el5.i386.rpm     aafcd92518199b219b33e983710062c8
ghostscript-8.15.2-9.11.el5.x86_64.rpm     0eeb2c6c2c0dbdfe9b513e07fa83974d
ghostscript-gtk-8.15.2-9.11.el5.x86_64.rpm     cfa66e48b6c426b2c543dbbfce89235a
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

450717 - ghostscript segfaults, can't print
465960 - build with -fno-strict-aliasing
473889 - ghostscript hangs on some PDF files
480978 - A3 pagesize pointsize definition wrong in gdevpsu.c
488127 - [RHEL5] ghostscript /rangecheck in --cvrs--



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/