Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 9 Oct 2018 15:32:02 -0700
From: Tavis Ormandy <>
Cc: Bob Friesenhahn <>
Subject: Re: ghostscript: bypassing executeonly to escape
 -dSAFER sandbox (CVE-2018-17961)

On Tue, Oct 9, 2018 at 3:27 PM Perry E. Metzger <> wrote:

> I keep wondering if there isn't a way to fully remove the dangerous
> bits from a postscript interpreter so it can _only_ be used to view
> the document and literally has no file system access compiled in at
> all, so there's no way to touch the fs etc. regardless of what flags
> the interpreter is invoked with.
> (I, too, find removing the ability to look at historical postscript
> documents a bit more draconian than I like.)
I've discussed it with upstream, it's a hard no because they feel it would
make ghostscript non-conforming (i.e. non-conforming with the Adobe
PostScript Language Reference Manual)

We probably have similar thoughts on this, but that is the final word from


Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.