A flaw was found in all ghostscript versions 9.x before 9.50, in the .setuserparams2 procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ghostscript | Nov 27, 2019 | Nov 27, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libgsUpgrade libgs-develUpgrade ghostscriptUpgrade ghostscript-docUpgrade ghostscript-debuginfoUpgrade ghostscript-cupsUpgrade ghostscript-gtk | Feb 22, 2021 | Nov 27, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 27, 2019 |
| Centos_linux | — | Upgrade ghostscriptUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-docUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-gtkUpgrade ghostscript-debugsourceUpgrade ghostscript-cupsUpgrade libgs-develUpgrade ghostscript-debuginfoUpgrade libgsUpgrade libgs-debuginfo | Sep 3, 2019 | Sep 2, 2019 |
| Debian | — | Upgrade ghostscript | Sep 9, 2019 | Sep 9, 2019 |
| Freebsd | — | Upgrade ghostscript9-agpl-x11Upgrade ghostscript9-agpl-base | Dec 10, 2019 | Dec 9, 2019 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Apr 2, 2020 | Nov 27, 2019 |
| Ghostscript | — | Upgrade to Ghostscript version 9.50 | Dec 6, 2019 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ghostscript-cupsUpgrade ghostscript | Jun 17, 2020 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ghostscriptUpgrade ghostscript-cups | Nov 19, 2019 | Aug 28, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ghostscript-cupsUpgrade ghostscript | Nov 19, 2019 | Aug 28, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ghostscriptUpgrade libgs | Feb 26, 2020 | Nov 27, 2019 |
| Oracle Solaris | — | Upgrade print/filter/ghostscript-core to version 9.27-11.4.15.0.1.1.0 on Solaris 11.4Upgrade print/filter/ghostscript to version 9.27-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Nov 20, 2019 |
| Oracle_linux | — | Upgrade ghostscript-cupsUpgrade ghostscript-tools-printingUpgrade ghostscript-gtkUpgrade ghostscript-tools-fontsUpgrade libgsUpgrade ghostscriptUpgrade ghostscript-tools-dvipdfUpgrade libgs-develUpgrade ghostscript-x11Upgrade ghostscript-doc | Jul 21, 2020 | Aug 28, 2019 |
| Redhat_linux | — | Upgrade libgs-debuginfoUpgrade libgs-develUpgrade ghostscript-docUpgrade ghostscript-debugsourceUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-cupsUpgrade ghostscript-gtkUpgrade ghostscript-x11No solution existsUpgrade ghostscriptUpgrade ghostscript-tools-fontsUpgrade libgsUpgrade ghostscript-tools-printingUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-debuginfo | Sep 3, 2019 | Sep 2, 2019 |
| Suse | — | Upgrade ghostscript-miniUpgrade ghostscript-x11Upgrade ghostscriptUpgrade ghostscript-mini-develUpgrade ghostscript-devel | Sep 27, 2019 | Aug 29, 2019 |
| Ubuntu | — | Upgrade ghostscriptUpgrade libgs9 | Aug 30, 2019 | Aug 29, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub