Red Hat Security AdvisoryRHSA-2019:0633
ghostscript security and bug fix update
Released 2019-03-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) ghostscript-9.07-31.el7_6.10, ghostscript-cups-9.07-31.el7_6.10
- Red Hat Enterprise Linux Client Optional (v. 7) ghostscript-devel-9.07-31.el7_6.10, ghostscript-doc-9.07-31.el7_6.10, ghostscript-gtk-9.07-31.el7_6.10
- Red Hat Enterprise Linux ComputeNode (v. 7) ghostscript-9.07-31.el7_6.10, ghostscript-cups-9.07-31.el7_6.10
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) ghostscript-devel-9.07-31.el7_6.10, ghostscript-doc-9.07-31.el7_6.10, ghostscript-gtk-9.07-31.el7_6.10
- Red Hat Enterprise Linux Server (v. 7) ghostscript-9.07-31.el7_6.10, ghostscript-9.07-31.el7_6.10.ppc, ghostscript-cups-9.07-31.el7_6.10
- Red Hat Enterprise Linux Server Optional (v. 7) ghostscript-devel-9.07-31.el7_6.10, ghostscript-devel-9.07-31.el7_6.10.ppc, ghostscript-doc-9.07-31.el7_6.10 +1
- Red Hat Enterprise Linux Workstation (v. 7) ghostscript-9.07-31.el7_6.10, ghostscript-cups-9.07-31.el7_6.10
- Red Hat Enterprise Linux Workstation Optional (v. 7) ghostscript-devel-9.07-31.el7_6.10, ghostscript-doc-9.07-31.el7_6.10, ghostscript-gtk-9.07-31.el7_6.10
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) ghostscript-9.07-31.el7_6.10, ghostscript-cups-9.07-31.el7_6.10
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) ghostscript-devel-9.07-31.el7_6.10, ghostscript-doc-9.07-31.el7_6.10, ghostscript-gtk-9.07-31.el7_6.10
Fixes 2 records
Priority LOW 30
It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.02473 · Published 2019-03-25 · Partial fix CWE-648
Priority LOW 30
It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.02473 · Published 2019-03-25 · Partial fix CWE-648
