Red Hat Security Advisory

RHSA-2019:3890

ghostscript security update

Released 2019-11-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) ghostscript-doc-9.25-5.el8_1.1, ghostscript-tools-dvipdf-9.25-5.el8_1.1, ghostscript-tools-fonts-9.25-5.el8_1.1 +3
Red Hat Enterprise Linux AppStream (v. 8) ghostscript-9.25-5.el8_1.1, libgs-9.25-5.el8_1.1

Fixes 1 record

TI-2019-11073 CVE-2019-14869 · GHSA-c87p-jj8p-c38g

Incorrect permission assignment in ghostscript

MEDIUM 44

A flaw was found in all versions of ghostscript 9.x before 9.50, where the `.charkeys` procedure, where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03094 Published 2019-11-15 Fixed CWE-648