Fixed packages 24
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 7 enterprise_linux:7::client | ghostscript | 0:9.07-31.el7_6.9 |
| Red Hat · RHEL 7 enterprise_linux:7::client | ghostscript-cups | 0:9.07-31.el7_6.9 |
| Red Hat · RHEL 7 enterprise_linux:7::client | ghostscript-debuginfo | 0:9.07-31.el7_6.9 |
| Red Hat · RHEL 7 enterprise_linux:7::client | ghostscript-devel | 0:9.07-31.el7_6.9 |
| Red Hat · RHEL 7 enterprise_linux:7::client | ghostscript-doc | 0:9.07-31.el7_6.9 |
| Red Hat · RHEL 7 enterprise_linux:7::client | ghostscript-gtk | 0:9.07-31.el7_6.9 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | ghostscript | 0:9.07-31.el7_6.9 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | ghostscript-cups | 0:9.07-31.el7_6.9 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | ghostscript-debuginfo | 0:9.07-31.el7_6.9 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | ghostscript-devel | 0:9.07-31.el7_6.9 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | ghostscript-doc | 0:9.07-31.el7_6.9 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | ghostscript-gtk | 0:9.07-31.el7_6.9 |
| Red Hat · RHEL 7 enterprise_linux:7::server | ghostscript | 0:9.07-31.el7_6.9 |
| Red Hat · RHEL 7 enterprise_linux:7::server | ghostscript-cups | 0:9.07-31.el7_6.9 |
| Red Hat · RHEL 7 enterprise_linux:7::server | ghostscript-debuginfo | 0:9.07-31.el7_6.9 |
| Red Hat · RHEL 7 enterprise_linux:7::server | ghostscript-devel | 0:9.07-31.el7_6.9 |
| Red Hat · RHEL 7 enterprise_linux:7::server | ghostscript-doc | 0:9.07-31.el7_6.9 |
| Red Hat · RHEL 7 enterprise_linux:7::server | ghostscript-gtk | 0:9.07-31.el7_6.9 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | ghostscript | 0:9.07-31.el7_6.9 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | ghostscript-cups | 0:9.07-31.el7_6.9 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | ghostscript-debuginfo | 0:9.07-31.el7_6.9 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | ghostscript-devel | 0:9.07-31.el7_6.9 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | ghostscript-doc | 0:9.07-31.el7_6.9 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | ghostscript-gtk | 0:9.07-31.el7_6.9 |
Vulnerabilities 5
-
Unscored —
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files to the builtin PDF14 converter co…
-
Unscored —
psi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions becaus…
-
Unscored —
psi/zicc.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of…
-
Unscored —
psi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because…
-
Unscored —
In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1625843
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1654459
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1654464
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1654468
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1665919
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1666636
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0229.json
-
report
https://access.redhat.com/security/cve/CVE-2018-16540
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-16540
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-16540
-
article
https://www.artifex.com/news/ghostscript-security-resolved/
-
advisory
https://www.kb.cert.org/vuls/id/332928
-
report
https://access.redhat.com/security/cve/CVE-2018-19475
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-19475
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-19475
-
article
https://blog.semmle.com/ghostscript-CVE-2018-19475/
-
report
https://access.redhat.com/security/cve/CVE-2018-19476
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-19476
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-19476
-
report
https://access.redhat.com/security/cve/CVE-2018-19477
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-19477
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-19477
-
report
https://access.redhat.com/security/cve/CVE-2019-6116
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-6116
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-6116
-
article
https://bugs.ghostscript.com/show_bug.cgi?id=700317