Red Hat Security AdvisoryRHSA-2019:2465
ghostscript security update
Released 2019-08-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) ghostscript-doc-9.25-2.el8_0.2, ghostscript-tools-dvipdf-9.25-2.el8_0.2, ghostscript-tools-fonts-9.25-2.el8_0.2 +3
- Red Hat Enterprise Linux AppStream (v. 8) ghostscript-9.25-2.el8_0.2, libgs-9.25-2.el8_0.2
Fixes 1 record
Priority LOW 38
In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02295 · Published 2019-11-27 · Partial fix · 9.50 CWE-648
