Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 591
Alerts This Week
Warning Icon 1 591

Slackware 14.2: SSA:2019-092-01 Moderate: Ghostscript Remote Code Execution

slackware
Calendar Grey April 2, 2019
Dist Slackware Esm H88
Updated Ghostscript builds for Slackware 14.2 address vulnerabilities that could allow remote code execution, enhancing system security.
New ghostscript packages are available for Slackware 14.2 and -current to fix security issues

Summary

Here are the details from the Slackware 14.2 ChangeLog: patches/packages/ghostscript-9.26-i586-1_slack14.2.txz: Upgraded. Fixes security issues: A specially crafted PostScript file could have access to the file system outside of the constrains imposed by -dSAFER. Transient procedures can allow access to system operators, leading to remote code execution. For more information, see: https://www.cve.org/CVERecord?id=CVE-2019-3835 https://www.cve.org/CVERecord?id=CVE-2019-3838 https://www.cve.org/CVERecord?id=CVE-2019-6116 (* Security fix *)

Topics%20covered

Topics Covered

security advisory remote code execution package update ghostscript slackware

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 14.2: ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/ghostscript-9.26-i586-1_slack14.2.txz
Updated package for Slackware x86_64 14.2: ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/ghostscript-9.26-x86_64-1_slack14.2.txz
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:

MD5 Signatures

Slackware 14.2 package: f4758b3fb8b489c5d952cb4adead3906 ghostscript-9.26-i586-1_slack14.2.txz
Slackware x86_64 14.2 package: 7f80a24e354260abcfd57d71f1100e96 ghostscript-9.26-x86_64-1_slack14.2.txz
Slackware -current package: d3088e1ae4aeb2fb7747991ec40870bb ap/ghostscript-9.26-i586-2.txz
Slackware x86_64 -current package: 80fed94357eb57a9c3877f39b8d2af50 ap/ghostscript-9.26-x86_64-2.txz

Topics%20covered

Topics Covered

security advisory remote code execution package update ghostscript slackware

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg ghostscript-9.26-i586-1_slack14.2.txz