USN-3831-2: Ghostscript regression
6 December 2018
USN-3831-1 introduced a regression in Ghostscript.
Releases
Packages
- ghostscript - PostScript and PDF interpreter
Details
USN-3831-1 fixed vulnerabilities in Ghostscript. Ghostscript 9.26
introduced a regression when used with certain options. This update fixes
the problem.
Original advisory details:
It was discovered that Ghostscript contained multiple security issues. If a
user or automated system were tricked into processing a specially crafted
file, a remote attacker could possibly use these issues to access arbitrary
files, execute arbitrary code, or cause a denial of service.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 18.10
Ubuntu 18.04
Ubuntu 16.04
Ubuntu 14.04
In general, a standard system update will make all the necessary changes.