Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 439
Alerts This Week
Warning Icon 1 439

Ubuntu 10.04 LTS USN-2483-2 Moderate: Ghostscript Code Execution Threat

ubuntu
Calendar Grey January 26, 2015
Dist Ubuntu Esm H88
Enhance your system's security by updating Ghostscript to fix vulnerabilities that could lead to crashes or unauthorized code execution. Follow these steps to apply updates.
Ghostscript could be made to crash or run programs as your login if it opened a specially crafted file.

Summary

Ghostscript could be made to crash or run programs as your login if it

opened a specially crafted file.

Software Description:

- ghostscript: PostScript and PDF interpreter

Details:

USN-2483-1 fixed vulnerabilities in JasPer. This update provides the

corresponding fix for the JasPer library embedded in the Ghostscript

package.

Original advisory details:

Jose Duart discovered that JasPer incorrectly handled ICC color profiles in

JPEG-2000 image files. If a user were tricked into opening a specially

crafted JPEG-2000 image file, a remote attacker could cause JasPer to crash

or possibly execute arbitrary code with user privileges. (CVE-2014-8137)

Jose Duart discovered that JasPer incorrectly decoded certain malformed

JPEG-2000 image files. If a user were tricked into opening a specially

crafted JPEG-2000 image file, a remote attacker could cause JasPer to crash

or possibly execute arbitrary code with user privileges. (CVE-2014-8138)

It was discove...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory moderate update code execution ghostscript issue ubuntu

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 10.04 LTS:
  libgs8                          8.71.dfsg.1-0ubuntu5.7

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2483-1

CVE-2014-8137, CVE-2014-8138, CVE-2014-8157, CVE-2014-8158

Severity
important
Lowest
Low
Medium
High
Critical

January 26, 2015

Topics%20covered

Topics Covered

security advisory moderate update code execution ghostscript issue ubuntu

Package Information

https://launchpad.net/ubuntu/+source/ghostscript/8.71.dfsg.1-0ubuntu5.7

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.