Ubuntu 22.10: USN-6017-1 Critical Ghostscript Code Execution DDoS

ubuntu

April 13, 2023

Ghostscript could be made to crash or run programs as your login if it received a specially crafted input.

Summary

Ghostscript could be made to crash or run programs as your login if it

received a specially crafted input.

Software Description:

- ghostscript: PostScript and PDF interpreter

Details:

Hadrien Perrineau discovered that Ghostscript incorrectly handled certain

inputs. An attacker could possibly use this issue to cause a denial of

service, or possibly execute arbitrary code.

Topics Covered

security advisory denial of service critical ghostscript Ubuntu

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.10:
   ghostscript                     9.56.1~dfsg1-0ubuntu3.1
   libgs9                          9.56.1~dfsg1-0ubuntu3.1

Ubuntu 22.04 LTS:
   ghostscript                     9.55.0~dfsg1-0ubuntu5.2
   libgs9                          9.55.0~dfsg1-0ubuntu5.2

Ubuntu 20.04 LTS:
   ghostscript                     9.50~dfsg-5ubuntu4.7
   libgs9                          9.50~dfsg-5ubuntu4.7

Ubuntu 18.04 LTS:
   ghostscript                     9.26~dfsg+0-0ubuntu0.18.04.18
   libgs9                          9.26~dfsg+0-0ubuntu0.18.04.18

Ubuntu 16.04 ESM:
   ghostscript                     9.26~dfsg+0-0ubuntu0.16.04.14+esm5
   libgs9                          9.26~dfsg+0-0ubuntu0.16.04.14+esm5

In general, a standard system update will make all the necessary changes.