Ghostscript Bug Fix and Enhancement Update - ALBA-2020:4635
Summary
ALBA-2020:4635: ghostscript bug fix and enhancement update. Affects ghostscript-doc versions < 9.25-7.el8. Fixed in 9.25-7.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Ghostscript is an interpreter for the PostScript language and for PDF. It is used for rendering and converting PostScript and PDF files. The affected packages in the AlmaLinux 8 ecosystem include ghostscript-doc, ghostscript-tools-dvipdf, ghostscript-tools-fonts, ghostscript-tools-printing, and libgs-devel.
Vulnerability Detail
This vulnerability in Ghostscript allows an attacker to execute arbitrary code or cause a denial of service by providing a specially crafted PostScript or PDF file. The vulnerability originates from a bug in the affected versions of Ghostscript, which has been fixed in version 9.25-7.el8. Exploiting this vulnerability could lead to unauthorized access, data loss, or system compromise.
How To Fix
Minimum fixed version
9.25-7.el8
This is the first release that contains the fix.
sudo dnf update ghostscript-docTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to update to the fixed version of the affected packages.
Conclusion
In conclusion, the Ghostscript bug fix and enhancement update addresses a vulnerability that could allow an attacker to execute arbitrary code or cause a denial of service. It is recommended to update the affected packages to the fixed version to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for ghostscript-doc →
FAQ
Ghostscript is an interpreter for the PostScript language and for PDF. It is commonly used for rendering and converting PostScript and PDF files.
This vulnerability allows an attacker to execute arbitrary code or cause a denial of service. It could lead to unauthorized access, data loss, or system compromise.
The affected packages in the AlmaLinux 8 ecosystem include ghostscript-doc, ghostscript-tools-dvipdf, ghostscript-tools-fonts, ghostscript-tools-printing, and libgs-devel.
To fix this vulnerability, update the affected packages to version 9.25-7.el8 or later by running the package manager update command specific to the operating system.
There is no known workaround for this vulnerability. It is crucial to update to the fixed version of the affected packages.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
