Issued:
2019-05-07
Updated:
2019-05-07

RHSA-2019:0971 - Security Advisory

Synopsis

Important: ghostscript security update

Type/Severity

Security Advisory: Important

Topic

An update for ghostscript is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

  • ghostscript: superexec operator is available (700585) (CVE-2019-3835)
  • ghostscript: forceput in DefineResource is still accessible (700576) (CVE-2019-3838)
  • ghostscript: missing attack vector protections for CVE-2019-6116 (CVE-2019-3839)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 8 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x

Fixes

  • BZ - 1673304 - CVE-2019-3839 ghostscript: missing attack vector protections for CVE-2019-6116
  • BZ - 1677581 - CVE-2019-3838 ghostscript: forceput in DefineResource is still accessible (700576)
  • BZ - 1677588 - CVE-2019-3835 ghostscript: superexec operator is available (700585)

CVEs

References

Red Hat Enterprise Linux for x86_64 8

SRPM
ghostscript-9.25-2.el8_0.1.src.rpm SHA-256: e5e6573344757c6dac3b1c8a85f2bfeeb5f9a165b7e31af76070655bac5865e4
x86_64
ghostscript-9.25-2.el8_0.1.x86_64.rpm SHA-256: f42b282fb94e7cabebb93481888a70f53da7223fbef5fe83dab4601badfa7cb3
ghostscript-debuginfo-9.25-2.el8_0.1.i686.rpm SHA-256: 9d7da430769049236ab7eeab6cf84b5f6f004f978284e858b481c8edf6bc4821
ghostscript-debuginfo-9.25-2.el8_0.1.x86_64.rpm SHA-256: 5fa23629fdadd7c0a05fc8bd7414cecfaa1e6a26a6dc0af1371e9edbfe3af06b
ghostscript-debugsource-9.25-2.el8_0.1.i686.rpm SHA-256: 9c1525a2f00a169ed6ab0d3d6d149121d3f97768520540ae1334fc4e2831e40c
ghostscript-debugsource-9.25-2.el8_0.1.x86_64.rpm SHA-256: d383e11f14bad6b82fbaaf0d6daefaf95751c73b2b6320325f077e6b582aa64b
ghostscript-gtk-debuginfo-9.25-2.el8_0.1.i686.rpm SHA-256: 39341e49f43284195a476489a78268e2415228bdbbce5ae0b00f11891064c6fc
ghostscript-gtk-debuginfo-9.25-2.el8_0.1.x86_64.rpm SHA-256: b93576286a7fa79ac1b6149e12998f35410e1d7a0836c0d1a8ebaa4069c2ed5e
ghostscript-x11-debuginfo-9.25-2.el8_0.1.i686.rpm SHA-256: fa69e1bbaf917f1c977625fbed5c6ae2d421237e90afc5771134cdf05e02612e
ghostscript-x11-debuginfo-9.25-2.el8_0.1.x86_64.rpm SHA-256: 06c0d5778096fa407335f19075d00edfff6c2f749f5a9a57460460d0136f2e4d
libgs-9.25-2.el8_0.1.i686.rpm SHA-256: c4f1a4e149983ff32097d62d6be07c2ee4f0bf43bebb45a26791935994b4cfba
libgs-9.25-2.el8_0.1.x86_64.rpm SHA-256: f7b357b679ad2cbe9dd0f615f8d98c5d636a24ee8d17ea0beb28eec9af18d80c
libgs-debuginfo-9.25-2.el8_0.1.i686.rpm SHA-256: 2a0506980f7a9280769a12b8f47eec86212ecc3ffcab1fc75268527f8dd935a3
libgs-debuginfo-9.25-2.el8_0.1.x86_64.rpm SHA-256: 6f0ea329dc218414d57527114d8dbc11f688142d2f360af5a7cc637b3e2c53e1

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
ghostscript-9.25-2.el8_0.1.src.rpm SHA-256: e5e6573344757c6dac3b1c8a85f2bfeeb5f9a165b7e31af76070655bac5865e4
s390x
ghostscript-9.25-2.el8_0.1.s390x.rpm SHA-256: 766607acc97dbffaebb6073cb67364cf78fae1be0d3bb9d6298117597a34a374
ghostscript-debuginfo-9.25-2.el8_0.1.s390x.rpm SHA-256: adbe99f17bbd2fda7832e0e119fe94aeb39b297300675bb5041336a210c81ad4
ghostscript-debugsource-9.25-2.el8_0.1.s390x.rpm SHA-256: 650bb57a8ab407b3d06248f61d83571a3bb6cccdf3e81d571b2e7cf228ce466e
ghostscript-gtk-debuginfo-9.25-2.el8_0.1.s390x.rpm SHA-256: 613e1cbdc288c5b829218fa49caa7d82e6eab96dabfe6df53cfbcbef8dad7ec7
ghostscript-x11-debuginfo-9.25-2.el8_0.1.s390x.rpm SHA-256: 0b51b4e17b9f399877ad0897261abbcb33877e7c1fe7aa1ab27536069991b900
libgs-9.25-2.el8_0.1.s390x.rpm SHA-256: a2667af9502d188bc2aa8de3a1c028ea59876f81c391a34b2f15ddbd1618d2f3
libgs-debuginfo-9.25-2.el8_0.1.s390x.rpm SHA-256: de11f25cae5b9f7918cd34e9d1b6f3a4374242ec4fe412a9f245aafb79d0b6fa

Red Hat Enterprise Linux for Power, little endian 8

SRPM
ghostscript-9.25-2.el8_0.1.src.rpm SHA-256: e5e6573344757c6dac3b1c8a85f2bfeeb5f9a165b7e31af76070655bac5865e4
ppc64le
ghostscript-9.25-2.el8_0.1.ppc64le.rpm SHA-256: 2c72fd6d9890d0f3abb89ae96923cd1288f227b36ecbca46b129155e65d86397
ghostscript-debuginfo-9.25-2.el8_0.1.ppc64le.rpm SHA-256: 5bacd1085cad55425a9af229625712466ac2e48c410cd3587b2ee395160d0bd9
ghostscript-debugsource-9.25-2.el8_0.1.ppc64le.rpm SHA-256: 39d50ec4d6c3d54c9e6ee474c83e4f59bc460d4974e63c810145b2c2e58c509a
ghostscript-gtk-debuginfo-9.25-2.el8_0.1.ppc64le.rpm SHA-256: 65073b0e653e0307d2271ecca2f2f26b030812f18c80d4b46c246f9eab978609
ghostscript-x11-debuginfo-9.25-2.el8_0.1.ppc64le.rpm SHA-256: 02b6e5d3f92b1e0d17d121c5781a2bb5919ef9d05cab5eb59f7974a5ba005dad
libgs-9.25-2.el8_0.1.ppc64le.rpm SHA-256: 969b66613f78d9eb7bf535b31f22d5a7b25c9b2e5454be95c88c9b6da6c79849
libgs-debuginfo-9.25-2.el8_0.1.ppc64le.rpm SHA-256: d435783743ab3bc3f743abbce110841250dfd8254d51e801ed108a1bedb7b202

Red Hat Enterprise Linux for ARM 64 8

SRPM
ghostscript-9.25-2.el8_0.1.src.rpm SHA-256: e5e6573344757c6dac3b1c8a85f2bfeeb5f9a165b7e31af76070655bac5865e4
aarch64
ghostscript-9.25-2.el8_0.1.aarch64.rpm SHA-256: cae9a59514db648747427761f75ce4ecf78f6270c0b788d0267eb34f0edd3258
ghostscript-debuginfo-9.25-2.el8_0.1.aarch64.rpm SHA-256: b508599978b2af476a24e72aacb363d7d70057b0ebb0b102a8593b762a0d7f6a
ghostscript-debugsource-9.25-2.el8_0.1.aarch64.rpm SHA-256: 9cc062b95560b4a2b1bb35aaaef6176918d4936044fc344de9109d3d620271a0
ghostscript-gtk-debuginfo-9.25-2.el8_0.1.aarch64.rpm SHA-256: 17df10706f6658a50eab59f8557ff6ced0f35e34a67b4ec12cdac271c58441d5
ghostscript-x11-debuginfo-9.25-2.el8_0.1.aarch64.rpm SHA-256: 2fb75cd73de20afea1ccf3a1c95f7dda59c93ebc53af64d11777587a8999006c
libgs-9.25-2.el8_0.1.aarch64.rpm SHA-256: 546d2849726b0a4187f05be323a40ac35d57cffde9c494e9a7971132d666b8e5
libgs-debuginfo-9.25-2.el8_0.1.aarch64.rpm SHA-256: a7ed1d24850ebc2c147b38b37f62161cc68a2e7d62b64ba6e61bbf1fab9a12ae

Red Hat CodeReady Linux Builder for x86_64 8

SRPM
x86_64
ghostscript-debuginfo-9.25-2.el8_0.1.i686.rpm SHA-256: 9d7da430769049236ab7eeab6cf84b5f6f004f978284e858b481c8edf6bc4821
ghostscript-debuginfo-9.25-2.el8_0.1.x86_64.rpm SHA-256: 5fa23629fdadd7c0a05fc8bd7414cecfaa1e6a26a6dc0af1371e9edbfe3af06b
ghostscript-debugsource-9.25-2.el8_0.1.i686.rpm SHA-256: 9c1525a2f00a169ed6ab0d3d6d149121d3f97768520540ae1334fc4e2831e40c
ghostscript-debugsource-9.25-2.el8_0.1.x86_64.rpm SHA-256: d383e11f14bad6b82fbaaf0d6daefaf95751c73b2b6320325f077e6b582aa64b
ghostscript-doc-9.25-2.el8_0.1.noarch.rpm SHA-256: adfc94db473a0dbebb7d8f99358e1c80906bc2777095d143c9bc50dc962c7d43
ghostscript-gtk-debuginfo-9.25-2.el8_0.1.i686.rpm SHA-256: 39341e49f43284195a476489a78268e2415228bdbbce5ae0b00f11891064c6fc
ghostscript-gtk-debuginfo-9.25-2.el8_0.1.x86_64.rpm SHA-256: b93576286a7fa79ac1b6149e12998f35410e1d7a0836c0d1a8ebaa4069c2ed5e
ghostscript-tools-dvipdf-9.25-2.el8_0.1.x86_64.rpm SHA-256: 8d32192a4612a374d1b744e8ba5b95cdae712c4381dd82aa8b770cfaf7edffee
ghostscript-tools-fonts-9.25-2.el8_0.1.x86_64.rpm SHA-256: ae81cafcc0b74c0d6d1a3ad067fc03af7db14edee2e9b1ca1175a33278d59b45
ghostscript-tools-printing-9.25-2.el8_0.1.x86_64.rpm SHA-256: 675a0cb07d96abb4f48e5966f8a27d481c5c2aa0088d13c7fc17308d05f897a6
ghostscript-x11-9.25-2.el8_0.1.x86_64.rpm SHA-256: 89c10cf886b114f1b8596d3b300dd31eb9c046d95f8651a4bc14b148fdb7895f
ghostscript-x11-debuginfo-9.25-2.el8_0.1.i686.rpm SHA-256: fa69e1bbaf917f1c977625fbed5c6ae2d421237e90afc5771134cdf05e02612e
ghostscript-x11-debuginfo-9.25-2.el8_0.1.x86_64.rpm SHA-256: 06c0d5778096fa407335f19075d00edfff6c2f749f5a9a57460460d0136f2e4d
libgs-debuginfo-9.25-2.el8_0.1.i686.rpm SHA-256: 2a0506980f7a9280769a12b8f47eec86212ecc3ffcab1fc75268527f8dd935a3
libgs-debuginfo-9.25-2.el8_0.1.x86_64.rpm SHA-256: 6f0ea329dc218414d57527114d8dbc11f688142d2f360af5a7cc637b3e2c53e1
libgs-devel-9.25-2.el8_0.1.i686.rpm SHA-256: 5a62cb921f43f21295d0d14320a61eeb658604bdb4511686036ebc8c651be022
libgs-devel-9.25-2.el8_0.1.x86_64.rpm SHA-256: 3a461a1c0f703218452b400e470cbbf7f800bdc58ae8a5595976dfe354393663

Red Hat CodeReady Linux Builder for Power, little endian 8

SRPM
ppc64le
ghostscript-debuginfo-9.25-2.el8_0.1.ppc64le.rpm SHA-256: 5bacd1085cad55425a9af229625712466ac2e48c410cd3587b2ee395160d0bd9
ghostscript-debugsource-9.25-2.el8_0.1.ppc64le.rpm SHA-256: 39d50ec4d6c3d54c9e6ee474c83e4f59bc460d4974e63c810145b2c2e58c509a
ghostscript-doc-9.25-2.el8_0.1.noarch.rpm SHA-256: adfc94db473a0dbebb7d8f99358e1c80906bc2777095d143c9bc50dc962c7d43
ghostscript-gtk-debuginfo-9.25-2.el8_0.1.ppc64le.rpm SHA-256: 65073b0e653e0307d2271ecca2f2f26b030812f18c80d4b46c246f9eab978609
ghostscript-tools-dvipdf-9.25-2.el8_0.1.ppc64le.rpm SHA-256: e6c5cd0f908328ebb3506656dc5885f35944184d381649de2076dc0420862476
ghostscript-tools-fonts-9.25-2.el8_0.1.ppc64le.rpm SHA-256: 35608d7821396385a8fbccf2aea894015a43e9d2f4b39f3198f0f78db1fdd82e
ghostscript-tools-printing-9.25-2.el8_0.1.ppc64le.rpm SHA-256: d12ad43b2eceba9f3fad8b4cb0af5d9b19ac87d212f51676997ba40bb52d4cc6
ghostscript-x11-9.25-2.el8_0.1.ppc64le.rpm SHA-256: 9500b06c00c8bbe963fb25e82f84cfd5071c70be19857b0e965a68e5365009c9
ghostscript-x11-debuginfo-9.25-2.el8_0.1.ppc64le.rpm SHA-256: 02b6e5d3f92b1e0d17d121c5781a2bb5919ef9d05cab5eb59f7974a5ba005dad
libgs-debuginfo-9.25-2.el8_0.1.ppc64le.rpm SHA-256: d435783743ab3bc3f743abbce110841250dfd8254d51e801ed108a1bedb7b202
libgs-devel-9.25-2.el8_0.1.ppc64le.rpm SHA-256: 43e344092171cdb8c38577d1e0965769077be3aa9b70bbbd7aa1008826d89637

Red Hat CodeReady Linux Builder for ARM 64 8

SRPM
aarch64
ghostscript-debuginfo-9.25-2.el8_0.1.aarch64.rpm SHA-256: b508599978b2af476a24e72aacb363d7d70057b0ebb0b102a8593b762a0d7f6a
ghostscript-debugsource-9.25-2.el8_0.1.aarch64.rpm SHA-256: 9cc062b95560b4a2b1bb35aaaef6176918d4936044fc344de9109d3d620271a0
ghostscript-doc-9.25-2.el8_0.1.noarch.rpm SHA-256: adfc94db473a0dbebb7d8f99358e1c80906bc2777095d143c9bc50dc962c7d43
ghostscript-gtk-debuginfo-9.25-2.el8_0.1.aarch64.rpm SHA-256: 17df10706f6658a50eab59f8557ff6ced0f35e34a67b4ec12cdac271c58441d5
ghostscript-tools-dvipdf-9.25-2.el8_0.1.aarch64.rpm SHA-256: c165df04d19ae6396f3a961dc1fb904e20ab132b628d52ac1e1033f1ccb99ef6
ghostscript-tools-fonts-9.25-2.el8_0.1.aarch64.rpm SHA-256: de1a6ea5c0b54a2a0b4a4cab109f211d1adad7057a9a575579a39ef02a643df0
ghostscript-tools-printing-9.25-2.el8_0.1.aarch64.rpm SHA-256: cec8f4f7f979ac8641d58283bd304bde7c768c737d186eedc1ca066a59fbc054
ghostscript-x11-9.25-2.el8_0.1.aarch64.rpm SHA-256: c4498cfd2bd02af66883cf5af6583b70ffeb2e1c217d9ebad93d2659b2f56427
ghostscript-x11-debuginfo-9.25-2.el8_0.1.aarch64.rpm SHA-256: 2fb75cd73de20afea1ccf3a1c95f7dda59c93ebc53af64d11777587a8999006c
libgs-debuginfo-9.25-2.el8_0.1.aarch64.rpm SHA-256: a7ed1d24850ebc2c147b38b37f62161cc68a2e7d62b64ba6e61bbf1fab9a12ae
libgs-devel-9.25-2.el8_0.1.aarch64.rpm SHA-256: d1135489bd3625dbda45118bff43453cf64337a8f8c9514857ef9458004a3486

Red Hat CodeReady Linux Builder for IBM z Systems 8

SRPM
s390x
ghostscript-debuginfo-9.25-2.el8_0.1.s390x.rpm SHA-256: adbe99f17bbd2fda7832e0e119fe94aeb39b297300675bb5041336a210c81ad4
ghostscript-debugsource-9.25-2.el8_0.1.s390x.rpm SHA-256: 650bb57a8ab407b3d06248f61d83571a3bb6cccdf3e81d571b2e7cf228ce466e
ghostscript-doc-9.25-2.el8_0.1.noarch.rpm SHA-256: adfc94db473a0dbebb7d8f99358e1c80906bc2777095d143c9bc50dc962c7d43
ghostscript-gtk-debuginfo-9.25-2.el8_0.1.s390x.rpm SHA-256: 613e1cbdc288c5b829218fa49caa7d82e6eab96dabfe6df53cfbcbef8dad7ec7
ghostscript-tools-dvipdf-9.25-2.el8_0.1.s390x.rpm SHA-256: 8a94c34e664ca1897060f3e09f0b8165025ac893f4aa738d48b8c66cad8d1dd0
ghostscript-tools-fonts-9.25-2.el8_0.1.s390x.rpm SHA-256: 8213983a981b583d35fdbb8983c3f90fe666399c4ae5f2ef1ccc9b9509a4c81d
ghostscript-tools-printing-9.25-2.el8_0.1.s390x.rpm SHA-256: 387189b19eaa881001b45b5a93cd408ef55673a5641d1e7a8a6937473deeed88
ghostscript-x11-9.25-2.el8_0.1.s390x.rpm SHA-256: 81256fc856af3877eaa47422ba06ed2439edd705a789acc976f23247581cc65c
ghostscript-x11-debuginfo-9.25-2.el8_0.1.s390x.rpm SHA-256: 0b51b4e17b9f399877ad0897261abbcb33877e7c1fe7aa1ab27536069991b900
libgs-debuginfo-9.25-2.el8_0.1.s390x.rpm SHA-256: de11f25cae5b9f7918cd34e9d1b6f3a4374242ec4fe412a9f245aafb79d0b6fa
libgs-devel-9.25-2.el8_0.1.s390x.rpm SHA-256: 3a654f6c38bba3b5d84efb06860606d15b8589767df5fbda3f70feaf157e9ef1

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.