Red Hat Security Advisory

RHSA-2019:1017

ghostscript security update

Released 2019-05-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) ghostscript-9.07-31.el7_6.11, ghostscript-cups-9.07-31.el7_6.11
Red Hat Enterprise Linux Client Optional (v. 7) ghostscript-devel-9.07-31.el7_6.11, ghostscript-doc-9.07-31.el7_6.11, ghostscript-gtk-9.07-31.el7_6.11
Red Hat Enterprise Linux ComputeNode (v. 7) ghostscript-9.07-31.el7_6.11, ghostscript-cups-9.07-31.el7_6.11
Red Hat Enterprise Linux ComputeNode Optional (v. 7) ghostscript-devel-9.07-31.el7_6.11, ghostscript-doc-9.07-31.el7_6.11, ghostscript-gtk-9.07-31.el7_6.11
Red Hat Enterprise Linux Server (v. 7) ghostscript-9.07-31.el7_6.11, ghostscript-9.07-31.el7_6.11.ppc, ghostscript-cups-9.07-31.el7_6.11
Red Hat Enterprise Linux Server Optional (v. 7) ghostscript-devel-9.07-31.el7_6.11, ghostscript-devel-9.07-31.el7_6.11.ppc, ghostscript-doc-9.07-31.el7_6.11 +1
Red Hat Enterprise Linux Workstation (v. 7) ghostscript-9.07-31.el7_6.11, ghostscript-cups-9.07-31.el7_6.11
Red Hat Enterprise Linux Workstation Optional (v. 7) ghostscript-devel-9.07-31.el7_6.11, ghostscript-doc-9.07-31.el7_6.11, ghostscript-gtk-9.07-31.el7_6.11
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) ghostscript-9.07-31.el7_6.11, ghostscript-cups-9.07-31.el7_6.11
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) ghostscript-devel-9.07-31.el7_6.11, ghostscript-doc-9.07-31.el7_6.11, ghostscript-gtk-9.07-31.el7_6.11

TI-2019-02851 CVE-2019-3839 · GHSA-wxr2-p327-97jr

LOW 37

It was found that in ghostscript some privileged operators remained accessible from various places after the CVE-2019-6116 fix.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01706 Published 2019-05-16 Partial fix CWE-648