Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Ubuntu 24.04 LTS Security Advisory USN-6897-1: Ghostscript DoS Issues

ubuntu
Calendar Grey July 15, 2024
Dist Ubuntu Esm H88
Multiple vulnerabilities in Ghostscript have been resolved on Ubuntu systems. Please update your software to improve both security and system reliability.
Several security issues were fixed in Ghostscript.

Summary

Several security issues were fixed in Ghostscript.

Software Description:

- ghostscript: PostScript and PDF interpreter

Details:

It was discovered that Ghostscript incorrectly handled certain long PDF

filter names. An attacker could possibly use this issue to cause

Ghostscript to crash, resulting in a denial of service. This issue only

affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2024-29506)

It was discovered that Ghostscript incorrectly handled certain API

parameters. An attacker could possibly use this issue to cause Ghostscript

to crash, resulting in a denial of service. This issue only affected Ubuntu

24.04 LTS. (CVE-2024-29507)

It was discovered that Ghostscript incorrectly handled certain BaseFont

names. An attacker could use this issue to cause Ghostscript to crash,

resulting in a denial of service, or possibly execute arbitrary code.

(CVE-2024-29508)

It was discovered that Ghostscript incorrectly handled certain PDF

passwords that contai...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service bug fix Ubuntu software updates Ghostscript

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
   ghostscript                     10.02.1~dfsg1-0ubuntu7.3
   libgs10                         10.02.1~dfsg1-0ubuntu7.3

Ubuntu 22.04 LTS
   ghostscript                     9.55.0~dfsg1-0ubuntu5.9
   libgs9                          9.55.0~dfsg1-0ubuntu5.9

Ubuntu 20.04 LTS
   ghostscript                     9.50~dfsg-5ubuntu4.13
   libgs9                          9.50~dfsg-5ubuntu4.13

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6897-1

CVE-2024-29506, CVE-2024-29507, CVE-2024-29508, CVE-2024-29509,

CVE-2024-29511

Severity
important
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-6897-1

Topics%20covered

Topics Covered

security advisory denial of service bug fix Ubuntu software updates Ghostscript

Package Information

https://launchpad.net/ubuntu/+source/ghostscript/10.02.1~dfsg1-0ubuntu7.3
https://launchpad.net/ubuntu/+source/ghostscript/9.55.0~dfsg1-0ubuntu5.9
https://launchpad.net/ubuntu/+source/ghostscript/9.50~dfsg-5ubuntu4.13

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here