Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges

Alerts This Week
Warning Icon 1 488
Alerts This Week
Warning Icon 1 488

Mageia: 2020-0143 Severe Risk in Ghostscript File Permissions Issue

mageia
Calendar Grey January 30, 2019
Scroller Mageia
MGASA-2019-0056 - Updated ghostscript packages fix a security vulnerability Publication date: 30 Jan
Ghostscript could be made to crash, access files, or run programs if it opened a specially crafted file

Summary

Ghostscript could be made to crash, access files, or run programs if it opened a specially crafted file. (CVE-2019-6116)

References

- https://bugs.mageia.org/show_bug.cgi?id=24233

- https://www.openwall.com/lists/oss-security/2019/01/23/5

- https://ubuntu.com/security/notices/USN-3866-1

- https://lists.debian.org/debian-security-announce/2019/msg00011.html

- https://www.cve.org/CVERecord?id=CVE-2019-6116

Topics%20covered

Topics Covered

security advisory ghostscript critical threat file access mageia

Resolution

SRPMS

- 6/core/ghostscript-9.26-1.2.mga6

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 30 Jan 2019
URL: https://advisories.mageia.org/MGASA-2019-0056.html
Type: security
CVE: CVE-2019-6116

Topics%20covered

Topics Covered

security advisory ghostscript critical threat file access mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.