Alerts This Week
Warning Icon 1 914
Alerts This Week
Warning Icon 1 914

Mageia 6: 2019-0188 moderate: Ghostscript File Access Issue

mageia
Calendar Grey June 10, 2019
Dist Mageia Esm H88
Ghostscript has released an update addressing a serious security vulnerability that allowed unauthorized access to files through malicious PostScript documents.
It was found that in ghostscript some privileged operators remained accessible from various places after the CVE-2019-6116 fix

Summary

It was found that in ghostscript some privileged operators remained accessible from various places after the CVE-2019-6116 fix. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER. Ghostscript versions before 9.28 are vulnerable. (CVE-2019-3839)

References

- https://bugs.mageia.org/show_bug.cgi?id=24786

- https://access.redhat.com/errata/RHSA-2019:1017

- https://www.cve.org/CVERecord?id=CVE-2019-3839

Topics%20covered

Topics Covered

security advisory moderate security issue update ghostscript file access mageia

Resolution

SRPMS

- 6/core/ghostscript-9.26-1.4.mga6

Publication date: 10 Jun 2019
URL: https://advisories.mageia.org/MGASA-2019-0188.html
Type: security
CVE: CVE-2019-3839

Topics%20covered

Topics Covered

security advisory moderate security issue update ghostscript file access mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here