A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ghostscript | Nov 8, 2019 | Sep 6, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ghostscript-gtkUpgrade ghostscriptUpgrade ghostscript-docUpgrade libgs-develUpgrade libgsUpgrade ghostscript-debuginfoUpgrade ghostscript-cups | Feb 22, 2021 | Sep 6, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 6, 2019 |
| Centos_linux | — | Upgrade ghostscript-x11-debuginfoUpgrade ghostscript-gtkUpgrade ghostscript-cupsUpgrade ghostscript-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscript-docUpgrade libgsUpgrade libgs-develUpgrade libgs-debuginfoUpgrade ghostscriptUpgrade ghostscript-gtk-debuginfo | Sep 3, 2019 | Sep 2, 2019 |
| Debian | — | Upgrade ghostscript | Sep 9, 2019 | Sep 6, 2019 |
| Freebsd | — | Upgrade ghostscript9-agpl-x11Upgrade ghostscript9-agpl-base | Dec 10, 2019 | Dec 9, 2019 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Apr 2, 2020 | Sep 6, 2019 |
| Ghostscript | — | Upgrade to Ghostscript version 9.51 | Sep 11, 2019 | Sep 6, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ghostscript-cupsUpgrade ghostscript | Jun 17, 2020 | Sep 6, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ghostscript-cupsUpgrade ghostscript | Nov 19, 2019 | Sep 6, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ghostscript-cupsUpgrade ghostscript | Nov 19, 2019 | Sep 6, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ghostscriptUpgrade libgs | Feb 26, 2020 | Sep 6, 2019 |
| Oracle Solaris | — | Upgrade print/filter/ghostscript-core to version 9.27-11.4.15.0.1.1.0 on Solaris 11.4Upgrade print/filter/ghostscript to version 9.27-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Sep 6, 2019 |
| Oracle_linux | — | Upgrade ghostscript-x11Upgrade libgsUpgrade ghostscript-tools-fontsUpgrade ghostscript-cupsUpgrade libgs-develUpgrade ghostscript-tools-dvipdfUpgrade ghostscriptUpgrade ghostscript-gtkUpgrade ghostscript-docUpgrade ghostscript-tools-printing | Jul 21, 2020 | Aug 28, 2019 |
| Redhat_linux | — | Upgrade ghostscript-debuginfoUpgrade ghostscript-x11Upgrade ghostscript-tools-fontsUpgrade libgs-develNo solution existsUpgrade ghostscript-cupsUpgrade ghostscript-x11-debuginfoUpgrade libgs-debuginfoUpgrade ghostscript-docUpgrade ghostscript-tools-dvipdfUpgrade ghostscriptUpgrade libgsUpgrade ghostscript-gtkUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscript-tools-printing | Sep 3, 2019 | Sep 2, 2019 |
| Suse | — | Upgrade ghostscript-mini-develUpgrade ghostscript-develUpgrade ghostscript-miniUpgrade ghostscriptUpgrade ghostscript-x11 | Sep 27, 2019 | Aug 29, 2019 |
| Ubuntu | — | Upgrade libgs9Upgrade ghostscript | Aug 30, 2019 | Aug 29, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub