Synopsis: Important: ghostscript security update
    Advisory ID:       SLSA-2019:2586-1
    Issue Date:        2019-09-03
    CVE Numbers:       CVE-2019-14813
                       CVE-2019-14812
                       CVE-2019-14811
                       CVE-2019-14817
    --    
    Security Fix(es):
    
    * ghostscript: Safer mode bypass by .forceput exposure in
    .pdf_hook_DSC_Creator (701445) (CVE-2019-14811)
    
    * ghostscript: Safer mode bypass by .forceput exposure in setuserparams
    (701444) (CVE-2019-14812)
    
    * ghostscript: Safer mode bypass by .forceput exposure in setsystemparams
    (701443) (CVE-2019-14813)
    
    * ghostscript: Safer mode bypass by .forceput exposure in .pdfexectoken
    and other procedures (701450) (CVE-2019-14817)
    --    
    SL7
      x86_64
        ghostscript-9.25-2.el7_7.2.i686.rpm
        ghostscript-9.25-2.el7_7.2.x86_64.rpm
        ghostscript-cups-9.25-2.el7_7.2.x86_64.rpm
        ghostscript-debuginfo-9.25-2.el7_7.2.i686.rpm
        ghostscript-debuginfo-9.25-2.el7_7.2.x86_64.rpm
        libgs-9.25-2.el7_7.2.i686.rpm
        libgs-9.25-2.el7_7.2.x86_64.rpm
        ghostscript-gtk-9.25-2.el7_7.2.x86_64.rpm
        libgs-devel-9.25-2.el7_7.2.i686.rpm
        libgs-devel-9.25-2.el7_7.2.x86_64.rpm
      noarch
        ghostscript-doc-9.25-2.el7_7.2.noarch.rpm
    
    - Scientific Linux Development Team

SciLinux: SLSA-2019-2586-1 Important: ghostscript on SL7.x x86_64

Multile security issues have been fixed.

Summary

Important: ghostscript security update



Security Fixes

* ghostscript: Safer mode bypass by .forceput exposure in .pdf_hook_DSC_Creator (701445) (CVE-2019-14811)
* ghostscript: Safer mode bypass by .forceput exposure in setuserparams (701444) (CVE-2019-14812)
* ghostscript: Safer mode bypass by .forceput exposure in setsystemparams (701443) (CVE-2019-14813)
* ghostscript: Safer mode bypass by .forceput exposure in .pdfexectoken and other procedures (701450) (CVE-2019-14817) SL7 x86_64 ghostscript-9.25-2.el7_7.2.i686.rpm ghostscript-9.25-2.el7_7.2.x86_64.rpm ghostscript-cups-9.25-2.el7_7.2.x86_64.rpm ghostscript-debuginfo-9.25-2.el7_7.2.i686.rpm ghostscript-debuginfo-9.25-2.el7_7.2.x86_64.rpm libgs-9.25-2.el7_7.2.i686.rpm libgs-9.25-2.el7_7.2.x86_64.rpm ghostscript-gtk-9.25-2.el7_7.2.x86_64.rpm libgs-devel-9.25-2.el7_7.2.i686.rpm libgs-devel-9.25-2.el7_7.2.x86_64.rpm noarch ghostscript-doc-9.25-2.el7_7.2.noarch.rpm
- Scientific Linux Development Team

Severity
Advisory ID: SLSA-2019:2586-1
Issued Date: : 2019-09-03
CVE Numbers: CVE-2019-14813
CVE-2019-14812
CVE-2019-14811

Related News

19.Laptop Bed Esm H320
2 - 3 min read
AlmaLinux 9.4 beta has been released and provides compelling reasons to consider it for desktop usage. While AlmaLinux is primarily known as a
32.Lock Code Circular Esm H320
2 - 3 min read
Linux admins and security practitioners face significant challenges in keeping their Linux systems secure amidst the constant threat of kernel bugs.
1.Penguin Landscape Esm H320
2 - 3 min read
A significant security threat, known as the Spectre v2 exploit, has been observed targeting Linux systems running on modern Intel processors. Let's
10.FingerPrint Locks Esm H320
2 - 3 min read
The recent release of I2P 2.5.0 , an anonymous P2P network that protects against online censorship, surveillance, and monitoring, has brought a slew
24.Key Code Esm H320
2 - 3 min read
The Akira ransomware group has extorted approximately $42 million from over 250 victims since January 1, 2024. The group initially focused on
5.ShakingHands Esm H320
2 - 3 min read
At The Linux Foundation's Open Source Summit North America , Linus Torvalds, the creator of Linux, discussed various topics related to Linux
30.Lock Globe Motherboard Esm H320
1 - 2 min read
The SPDX 3.0 release marks a significant milestone in software management, particularly for Linux admins, infosec professionals, internet security
11.Locks IsometricPattern Esm H320
2 - 3 min read
Open Source maintainers and developers have been warned about the continued wave of attacks aimed at project maintainers similar to those recently
Sign Up

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved