Lucene search

DebianDEBIAN:DSA-4748-1:6F04D

HistoryAug 25, 2020 - 7:27 p.m.

[SECURITY] [DSA 4748-1] ghostscript security update

2020-08-2519:27:37

lists.debian.org

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0.006

Percentile

78.7%

JSON

Debian Security Advisory DSA-4748-1 [email protected]
https://www.debian.org/security/ Moritz Muehlenhoff
August 25, 2020 https://www.debian.org/security/faq

Package : ghostscript
CVE ID : CVE-2020-16287 CVE-2020-16288 CVE-2020-16289 CVE-2020-16290
CVE-2020-16291 CVE-2020-16292 CVE-2020-16293 CVE-2020-16294
CVE-2020-16295 CVE-2020-16296 CVE-2020-16297 CVE-2020-16298
CVE-2020-16299 CVE-2020-16300 CVE-2020-16301 CVE-2020-16302
CVE-2020-16303 CVE-2020-16304 CVE-2020-16305 CVE-2020-16306
CVE-2020-16307 CVE-2020-16308 CVE-2020-16309 CVE-2020-16310
CVE-2020-17538

Multiple security issues were discovered in Ghostscript, the GPL
PostScript/PDF interpreter which could result in denial of service and
potentially the execution of arbitrary code if malformed document files
are processed.

For the stable distribution (buster), these problems have been fixed in
version 9.27~dfsg-2+deb10u4.

We recommend that you upgrade your ghostscript packages.

For the detailed security status of ghostscript please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/ghostscript

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian9amd64ghostscript< 9.26a~dfsg-0+deb9u7ghostscript_9.26a~dfsg-0+deb9u7_amd64.deb
Debian10mips64elghostscript-dbg< 9.27~dfsg-2+deb10u4ghostscript-dbg_9.27~dfsg-2+deb10u4_mips64el.deb
Debian10i386libgs9< 9.27~dfsg-2+deb10u4libgs9_9.27~dfsg-2+deb10u4_i386.deb
Debian10mipsellibgs-dev< 9.27~dfsg-2+deb10u4libgs-dev_9.27~dfsg-2+deb10u4_mipsel.deb
Debian9i386ghostscript-x< 9.26a~dfsg-0+deb9u7ghostscript-x_9.26a~dfsg-0+deb9u7_i386.deb
Debian9amd64ghostscript-x< 9.26a~dfsg-0+deb9u7ghostscript-x_9.26a~dfsg-0+deb9u7_amd64.deb
Debian9armellibgs-dev< 9.26a~dfsg-0+deb9u7libgs-dev_9.26a~dfsg-0+deb9u7_armel.deb
Debian10ppc64elghostscript-x< 9.27~dfsg-2+deb10u4ghostscript-x_9.27~dfsg-2+deb10u4_ppc64el.deb
Debian10armhfghostscript-dbg< 9.27~dfsg-2+deb10u4ghostscript-dbg_9.27~dfsg-2+deb10u4_armhf.deb
Debian10armellibgs9< 9.27~dfsg-2+deb10u4libgs9_9.27~dfsg-2+deb10u4_armel.deb

OS	Version	Architecture	Package	Version	Filename
Debian	9	amd64	ghostscript	< 9.26a~dfsg-0+deb9u7	ghostscript_9.26a~dfsg-0+deb9u7_amd64.deb
Debian	10	mips64el	ghostscript-dbg	< 9.27~dfsg-2+deb10u4	ghostscript-dbg_9.27~dfsg-2+deb10u4_mips64el.deb
Debian	10	i386	libgs9	< 9.27~dfsg-2+deb10u4	libgs9_9.27~dfsg-2+deb10u4_i386.deb
Debian	10	mipsel	libgs-dev	< 9.27~dfsg-2+deb10u4	libgs-dev_9.27~dfsg-2+deb10u4_mipsel.deb
Debian	9	i386	ghostscript-x	< 9.26a~dfsg-0+deb9u7	ghostscript-x_9.26a~dfsg-0+deb9u7_i386.deb
Debian	9	amd64	ghostscript-x	< 9.26a~dfsg-0+deb9u7	ghostscript-x_9.26a~dfsg-0+deb9u7_amd64.deb
Debian	9	armel	libgs-dev	< 9.26a~dfsg-0+deb9u7	libgs-dev_9.26a~dfsg-0+deb9u7_armel.deb
Debian	10	ppc64el	ghostscript-x	< 9.27~dfsg-2+deb10u4	ghostscript-x_9.27~dfsg-2+deb10u4_ppc64el.deb
Debian	10	armhf	ghostscript-dbg	< 9.27~dfsg-2+deb10u4	ghostscript-dbg_9.27~dfsg-2+deb10u4_armhf.deb
Debian	10	armel	libgs9	< 9.27~dfsg-2+deb10u4	libgs9_9.27~dfsg-2+deb10u4_armel.deb