Ubuntu 23.04 USN-6213-1 Critical: Ghostscript Remote Code Execution

ubuntu

July 10, 2023

Ghostscript could be made to run programs if it opened a specially crafted file.

Summary

Ghostscript could be made to run programs if it opened a specially crafted

file.

Software Description:

- ghostscript: PostScript and PDF interpreter

Details:

It was discovered that Ghostscript incorrectly handled pipe devices. If a

user or automated system were tricked into opening a specially crafted PDF

file, a remote attacker could use this issue to execute arbitrary code.

Topics Covered

security advisory critical remote code execution ghostscript ubuntu

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.04:
   ghostscript                     10.0.0~dfsg1-0ubuntu1.2

Ubuntu 22.10:
   ghostscript                     9.56.1~dfsg1-0ubuntu3.2

Ubuntu 22.04 LTS:
   ghostscript                     9.55.0~dfsg1-0ubuntu5.3

Ubuntu 20.04 LTS:
   ghostscript                     9.50~dfsg-5ubuntu4.8

In general, a standard system update will make all the necessary changes.