High ELSA-2019-3890 1 CVE

Important: ghostscript security update (Oracle Linux 8)

Published Nov 22, 2019 · Updated Nov 22, 2019

Ecosystem: Oracle Linux

Summary

[9.25-5.1]
- 1769342 - CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys

Fixed packages 8

Release	Package	Fixed in
Oracle Linux · 8	ghostscript	0:9.25-5.el8_1.1
Oracle Linux · 8	ghostscript-doc	0:9.25-5.el8_1.1
Oracle Linux · 8	ghostscript-tools-dvipdf	0:9.25-5.el8_1.1
Oracle Linux · 8	ghostscript-tools-fonts	0:9.25-5.el8_1.1
Oracle Linux · 8	ghostscript-tools-printing	0:9.25-5.el8_1.1
Oracle Linux · 8	ghostscript-x11	0:9.25-5.el8_1.1
Oracle Linux · 8	libgs	0:9.25-5.el8_1.1
Oracle Linux · 8	libgs-devel	0:9.25-5.el8_1.1

Vulnerabilities 1

High 7.3

CVE-2019-14869

A flaw was found in all versions of ghostscript 9.x before 9.50, where the `.charkeys` procedure, where it did not prop…

Ghostscript ghostscript ghostscript ghostscript Debian Ubuntu Alpine

Nov 15, 2019