The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant of the flaw and bypass the -dSAFER protection to, for example, execute arbitrary shell commands via a specially crafted PostScript document. This only affects ghostscript 9.07 as shipped with Red Hat Enterprise Linux 7.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade ghostscript-docUpgrade ghostscriptUpgrade ghostscript-debuginfoUpgrade ghostscript-cupsUpgrade ghostscript-gtkUpgrade ghostscript-devel | Dec 15, 2018 | Dec 3, 2018 |
| Ghostscript | — | Upgrade to Ghostscript version 9.18 | Jan 8, 2019 | Dec 3, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ghostscript-cupsUpgrade ghostscript | Feb 22, 2019 | Dec 3, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ghostscriptUpgrade ghostscript-cups | Feb 15, 2019 | Dec 3, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ghostscriptUpgrade ghostscript-cups | Feb 15, 2019 | Dec 3, 2018 |
| Oracle_linux | — | Upgrade ghostscript-gtkUpgrade ghostscript-cupsUpgrade ghostscriptUpgrade ghostscript-docUpgrade ghostscript-devel | Jul 21, 2020 | Dec 3, 2018 |
| Redhat_linux | — | Upgrade ghostscriptUpgrade ghostscript-cupsUpgrade ghostscript-develUpgrade ghostscript-gtkUpgrade ghostscript-docUpgrade ghostscript-debuginfo | Dec 4, 2018 | Dec 3, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub