Moderate: ghostscript security, bug fix, and enhancement update
Summary
RLSA-2021:1852: Moderate: ghostscript security, bug fix, and enhancement update. Affects ghostscript versions < 0:9.27-1.el8. Fixed in 0:9.27-1.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Ghostscript is a suite of utilities used for rendering PostScript and PDF documents. It translates PostScript code to common bitmap formats for display or printing purposes.
Vulnerability Detail
This update addresses multiple security vulnerabilities in Ghostscript. These vulnerabilities include use-after-free, buffer overflow, NULL pointer dereference, division by zero, and privilege escalation issues. Exploiting these vulnerabilities could lead to denial of service (DoS) attacks or privilege escalation.
How To Fix
Minimum fixed version
0:9.27-1.el8
This is the first release that contains the fix.
sudo dnf update ghostscriptTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
Updating the Ghostscript package to version 9.27 or later is crucial to address these security vulnerabilities. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for ghostscript →
FAQ
Ghostscript is a suite of utilities used for rendering PostScript and PDF documents.
This update addresses multiple vulnerabilities, including use-after-free, buffer overflow, NULL pointer dereference, division by zero, and privilege escalation issues.
Exploiting these vulnerabilities could lead to denial of service (DoS) attacks or privilege escalation.
To fix these vulnerabilities, it is recommended to update the Ghostscript package to version 9.27 or later.
You can find more information about these vulnerabilities in the CVE pages listed in the References section.
References
Related vulnerabilities
Recent vulnerabilities recorded for ghostscript.
