Red Hat Security AdvisoryRHSA-2019:2281
ghostscript security, bug fix, and enhancement update
Released 2019-08-06 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) ghostscript-9.25-2.el7, ghostscript-cups-9.25-2.el7, libgs-9.25-2.el7
- Red Hat Enterprise Linux Client Optional (v. 7) ghostscript-doc-9.25-2.el7, ghostscript-gtk-9.25-2.el7, libgs-devel-9.25-2.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) ghostscript-9.25-2.el7, ghostscript-cups-9.25-2.el7, libgs-9.25-2.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) ghostscript-doc-9.25-2.el7, ghostscript-gtk-9.25-2.el7, libgs-devel-9.25-2.el7
- Red Hat Enterprise Linux Server (v. 7) ghostscript-9.25-2.el7, ghostscript-9.25-2.el7.ppc, ghostscript-cups-9.25-2.el7 +2
- Red Hat Enterprise Linux Server Optional (v. 7) ghostscript-doc-9.25-2.el7, ghostscript-gtk-9.25-2.el7, libgs-devel-9.25-2.el7 +1
- Red Hat Enterprise Linux Workstation (v. 7) ghostscript-9.25-2.el7, ghostscript-cups-9.25-2.el7, libgs-9.25-2.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) ghostscript-doc-9.25-2.el7, ghostscript-gtk-9.25-2.el7, libgs-devel-9.25-2.el7
Fixes 1 record
Priority LOW 29
psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016…
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02582 · Published 2018-06-01 · Partial fix CWE-200
