Ubuntu 15.04 LTS USN-2697-1 Moderate Ghostscript Code Execution

ubuntu

July 30, 2015

Ghostscript could be made to crash or run programs if it processed a specially crafted file.

Summary

Ghostscript could be made to crash or run programs if it processed a

specially crafted file.

Software Description:

- ghostscript: PostScript and PDF interpreter

Details:

William Robinet and Stefan Cornelius discovered that Ghostscript did not

correctly handle certain Postscript files. If a user or automated system

were tricked into opening a specially crafted file, an attacker could cause

a denial of service or possibly execute arbitrary code.

Topics Covered

security advisory denial of service code execution ghostscript ubuntu

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.04:
  libgs9                          9.15+dfsg-0ubuntu2.1

Ubuntu 14.04 LTS:
  libgs9                          9.10~dfsg-0ubuntu10.4

Ubuntu 12.04 LTS:
  libgs9                          9.05~dfsg-0ubuntu4.3

In general, a standard system update will make all the necessary changes.