The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and access files outside of restricted areas.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ghostscript | Nov 27, 2019 | Nov 27, 2019 |
| Centos_linux | — | Upgrade ghostscript-docUpgrade ghostscript-debugsourceUpgrade libgs-debuginfoUpgrade ghostscriptUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-cupsUpgrade libgsUpgrade libgs-develUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-debuginfoUpgrade ghostscript-gtk | Aug 28, 2019 | Aug 12, 2019 |
| Debian | — | Upgrade ghostscript | Aug 14, 2019 | Aug 14, 2019 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Apr 2, 2020 | Nov 27, 2019 |
| Ghostscript | — | Upgrade to Ghostscript version 9.50 | Dec 27, 2019 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ghostscript-cupsUpgrade ghostscript | Sep 28, 2020 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ghostscript-cupsUpgrade ghostscript | Feb 24, 2020 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libgsUpgrade ghostscript | Sep 30, 2019 | Aug 12, 2019 |
| Oracle Solaris | — | Upgrade print/filter/ghostscript-core to version 9.27-11.4.15.0.1.1.0 on Solaris 11.4Upgrade print/filter/ghostscript to version 9.27-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Nov 20, 2019 |
| Oracle_linux | — | Upgrade ghostscript-tools-printingUpgrade ghostscript-tools-fontsUpgrade ghostscript-gtkUpgrade ghostscript-cupsUpgrade libgsUpgrade ghostscript-tools-dvipdfUpgrade ghostscriptUpgrade ghostscript-docUpgrade ghostscript-x11Upgrade libgs-devel | Jul 21, 2020 | Aug 12, 2019 |
| Redhat_linux | — | Upgrade ghostscript-debuginfoUpgrade ghostscript-cupsUpgrade ghostscript-tools-printingUpgrade ghostscript-gtkUpgrade libgs-develUpgrade ghostscript-x11Upgrade ghostscript-tools-dvipdfUpgrade ghostscript-tools-fontsUpgrade libgsUpgrade ghostscriptUpgrade ghostscript-docNo solution existsUpgrade libgs-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-x11-debuginfo | Aug 13, 2019 | Aug 12, 2019 |
| Suse | — | Upgrade ghostscriptUpgrade ghostscript-mini-develUpgrade ghostscript-x11Upgrade ghostscript-miniUpgrade ghostscript-devel | Sep 11, 2019 | Aug 12, 2019 |
| Ubuntu | — | Upgrade ghostscriptUpgrade libgs9 | Aug 13, 2019 | Aug 12, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub