Synopsis

Important: ghostscript security update

Type/Severity

Security Advisory: Important

Topic

An update for ghostscript is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

• ghostscript: -dSAFER escape via .buildfont1 (701394) (CVE-2019-10216)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 8 x86_64
• Red Hat Enterprise Linux for IBM z Systems 8 s390x
• Red Hat Enterprise Linux for Power, little endian 8 ppc64le
• Red Hat Enterprise Linux for ARM 64 8 aarch64
• Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.0 ppc64le
• Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.0 x86_64
• Red Hat CodeReady Linux Builder for x86_64 8 x86_64
• Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le
• Red Hat CodeReady Linux Builder for ARM 64 8 aarch64
• Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x

Fixes

• BZ - 1737080 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)

CVEs

• CVE-2019-10216

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux for x86_64 8

SRPM
ghostscript-9.25-2.el8_0.2.src.rpm	SHA-256: 127e0f98ce85b801e1ea78930789e39b3789e793b960bd3f832bde4e03d23383
x86_64
ghostscript-9.25-2.el8_0.2.x86_64.rpm	SHA-256: 4c334e29609e4364617f057e82b53194803523281718c81a1c08980c19ea3fba
ghostscript-debuginfo-9.25-2.el8_0.2.i686.rpm	SHA-256: c7d2702dc4f9cc5a9daf8078b4e38d6311e193bbfe561d816877a3db4abbf9e1
ghostscript-debuginfo-9.25-2.el8_0.2.x86_64.rpm	SHA-256: 500041dad13421b95c706e16ec5d338a1759d372686f62f95c78e139564a1866
ghostscript-debugsource-9.25-2.el8_0.2.i686.rpm	SHA-256: 6eb99c59289cb77c6ee61227d8e6c3d99cf623176bf372530b8e5caf20d69b1c
ghostscript-debugsource-9.25-2.el8_0.2.x86_64.rpm	SHA-256: c5d55be9f1d8cfb0df2c977eef06c4ec17998e3844ac16d57741a74ab884eae4
ghostscript-gtk-debuginfo-9.25-2.el8_0.2.i686.rpm	SHA-256: 6b5b2c998309d5d1681d38bd2890015711736f1a8d8547ab0d99a673fdb1d9ca
ghostscript-gtk-debuginfo-9.25-2.el8_0.2.x86_64.rpm	SHA-256: 76ae0908ff0fe582ebfd30ea9e4580313957fc1cac0ca7e0783f7ab5bf0fab69
ghostscript-x11-debuginfo-9.25-2.el8_0.2.i686.rpm	SHA-256: 05702a0f1e23401b69df80e3549f3003fbc5be378f61b27e95b5ee4d230f918d
ghostscript-x11-debuginfo-9.25-2.el8_0.2.x86_64.rpm	SHA-256: c38b0b8d556504bdaf378781d66ac2afca3ce9af13b7309103cd89350b36950d
libgs-9.25-2.el8_0.2.i686.rpm	SHA-256: b2c89eaa5be0b3f588fd3c75bf5fc68a4332ee3506eea2a5dc333f3e020e6b2b
libgs-9.25-2.el8_0.2.x86_64.rpm	SHA-256: 203f0b8ecf0640954c0643c942deb53ffd78de5020e20c9c8154111d108b38dd
libgs-debuginfo-9.25-2.el8_0.2.i686.rpm	SHA-256: ee75b5097fdf04584bfce997c64662124c274dbe54cff38cf2b952d5a3dcf556
libgs-debuginfo-9.25-2.el8_0.2.x86_64.rpm	SHA-256: 8bb1cf0ed8398fa8558dba1a4c42685d3dd64f74daaaf53ce5fbcaa750b5bafb

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
ghostscript-9.25-2.el8_0.2.src.rpm	SHA-256: 127e0f98ce85b801e1ea78930789e39b3789e793b960bd3f832bde4e03d23383
s390x
ghostscript-9.25-2.el8_0.2.s390x.rpm	SHA-256: fef36f4911b200155b54e13699a219e604fe3951a59cec4f82772d90b4113139
ghostscript-debuginfo-9.25-2.el8_0.2.s390x.rpm	SHA-256: f036ae9820e0e978382d71778d0f67f8dd007fb14f202de71679d5609677d8f3
ghostscript-debugsource-9.25-2.el8_0.2.s390x.rpm	SHA-256: 7c8aa0ec35c38213020e6905610aa89a6977f1ed7a9c195a7838f624f1d666a5
ghostscript-gtk-debuginfo-9.25-2.el8_0.2.s390x.rpm	SHA-256: a7e4fc4bbb77ed4a31410b7e67dda68e430f3a11db33c43f56c8594e1320533f
ghostscript-x11-debuginfo-9.25-2.el8_0.2.s390x.rpm	SHA-256: ecbabf0b825920ef47ac496c8199916412b901dec3aac668b3a9356e163ea7c8
libgs-9.25-2.el8_0.2.s390x.rpm	SHA-256: 11e8ff4cb9d46a03b936e135aae7339961d592503046e8e5e045d35d51f680b3
libgs-debuginfo-9.25-2.el8_0.2.s390x.rpm	SHA-256: 4c27f34bed5f57c9bd8d44f0089fdfb7d126bce571ee22c40fc019b55b3c0045

Red Hat Enterprise Linux for Power, little endian 8

SRPM
ghostscript-9.25-2.el8_0.2.src.rpm	SHA-256: 127e0f98ce85b801e1ea78930789e39b3789e793b960bd3f832bde4e03d23383
ppc64le
ghostscript-9.25-2.el8_0.2.ppc64le.rpm	SHA-256: 0e1403e7e4455d7f582409364e30d9e05417541583ca4e27b735eba411594884
ghostscript-debuginfo-9.25-2.el8_0.2.ppc64le.rpm	SHA-256: 0d988411bbad8e45057182b8d89a700bf892397a7ad974e001a19dbb3b98c720
ghostscript-debugsource-9.25-2.el8_0.2.ppc64le.rpm	SHA-256: 6ecd6d60b0786d7799113b79fada45062c5fd2a6359b148bb0c215f264ef1182
ghostscript-gtk-debuginfo-9.25-2.el8_0.2.ppc64le.rpm	SHA-256: c722e29cc50cdc2d32f5b6127d0ece54bdd9814f8a25bad5f89911ec74e4d15c
ghostscript-x11-debuginfo-9.25-2.el8_0.2.ppc64le.rpm	SHA-256: 74602881dd9ea90105d805f4a92fbbcb330f13567a53b58492b1888ec0ec2622
libgs-9.25-2.el8_0.2.ppc64le.rpm	SHA-256: 92aa5e0cdf76d77ecb12e4533cb73a65a2a71a9a64d69d80af5c415d6674c35e
libgs-debuginfo-9.25-2.el8_0.2.ppc64le.rpm	SHA-256: a380f85335d4648a30dc072be8e203653cd60de9fab768171aedafc04e00296c

Red Hat Enterprise Linux for ARM 64 8

SRPM
ghostscript-9.25-2.el8_0.2.src.rpm	SHA-256: 127e0f98ce85b801e1ea78930789e39b3789e793b960bd3f832bde4e03d23383
aarch64
ghostscript-9.25-2.el8_0.2.aarch64.rpm	SHA-256: db83be9076b0175a99bba64d247860d50caaf101284323456feb512304467e8f
ghostscript-debuginfo-9.25-2.el8_0.2.aarch64.rpm	SHA-256: 945c6aa4b030429dabd9d4f5759e075e97299450ed288867e9184da70bda897d
ghostscript-debugsource-9.25-2.el8_0.2.aarch64.rpm	SHA-256: 17e703b1ab6aff17f0e1439c4a58e796d360a01e97b46d0ab1eaafb550f9b625
ghostscript-gtk-debuginfo-9.25-2.el8_0.2.aarch64.rpm	SHA-256: 964f0b570cd5f1be81241d5401f5c9ac13ddda1beccee74d20831cbe73f9fe45
ghostscript-x11-debuginfo-9.25-2.el8_0.2.aarch64.rpm	SHA-256: 41936ebe904e7b1f483660bd02afb0e64586e5b0cb33df656c4011ac75183478
libgs-9.25-2.el8_0.2.aarch64.rpm	SHA-256: bccd9c05356c79254cdbf4a70e59168785c7ce353254ffdacff0dbda5eb9d070
libgs-debuginfo-9.25-2.el8_0.2.aarch64.rpm	SHA-256: 278d0b078fd7a7446724d2374e37a12252301042948667c84419df62eb7ff077

Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.0

SRPM
ghostscript-9.25-2.el8_0.2.src.rpm	SHA-256: 127e0f98ce85b801e1ea78930789e39b3789e793b960bd3f832bde4e03d23383
ppc64le
ghostscript-9.25-2.el8_0.2.ppc64le.rpm	SHA-256: 0e1403e7e4455d7f582409364e30d9e05417541583ca4e27b735eba411594884
ghostscript-debuginfo-9.25-2.el8_0.2.ppc64le.rpm	SHA-256: 0d988411bbad8e45057182b8d89a700bf892397a7ad974e001a19dbb3b98c720
ghostscript-debugsource-9.25-2.el8_0.2.ppc64le.rpm	SHA-256: 6ecd6d60b0786d7799113b79fada45062c5fd2a6359b148bb0c215f264ef1182
ghostscript-gtk-debuginfo-9.25-2.el8_0.2.ppc64le.rpm	SHA-256: c722e29cc50cdc2d32f5b6127d0ece54bdd9814f8a25bad5f89911ec74e4d15c
ghostscript-x11-debuginfo-9.25-2.el8_0.2.ppc64le.rpm	SHA-256: 74602881dd9ea90105d805f4a92fbbcb330f13567a53b58492b1888ec0ec2622
libgs-9.25-2.el8_0.2.ppc64le.rpm	SHA-256: 92aa5e0cdf76d77ecb12e4533cb73a65a2a71a9a64d69d80af5c415d6674c35e
libgs-debuginfo-9.25-2.el8_0.2.ppc64le.rpm	SHA-256: a380f85335d4648a30dc072be8e203653cd60de9fab768171aedafc04e00296c

Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.0

SRPM
ghostscript-9.25-2.el8_0.2.src.rpm	SHA-256: 127e0f98ce85b801e1ea78930789e39b3789e793b960bd3f832bde4e03d23383
x86_64
ghostscript-9.25-2.el8_0.2.x86_64.rpm	SHA-256: 4c334e29609e4364617f057e82b53194803523281718c81a1c08980c19ea3fba
ghostscript-debuginfo-9.25-2.el8_0.2.i686.rpm	SHA-256: c7d2702dc4f9cc5a9daf8078b4e38d6311e193bbfe561d816877a3db4abbf9e1
ghostscript-debuginfo-9.25-2.el8_0.2.x86_64.rpm	SHA-256: 500041dad13421b95c706e16ec5d338a1759d372686f62f95c78e139564a1866
ghostscript-debugsource-9.25-2.el8_0.2.i686.rpm	SHA-256: 6eb99c59289cb77c6ee61227d8e6c3d99cf623176bf372530b8e5caf20d69b1c
ghostscript-debugsource-9.25-2.el8_0.2.x86_64.rpm	SHA-256: c5d55be9f1d8cfb0df2c977eef06c4ec17998e3844ac16d57741a74ab884eae4
ghostscript-gtk-debuginfo-9.25-2.el8_0.2.i686.rpm	SHA-256: 6b5b2c998309d5d1681d38bd2890015711736f1a8d8547ab0d99a673fdb1d9ca
ghostscript-gtk-debuginfo-9.25-2.el8_0.2.x86_64.rpm	SHA-256: 76ae0908ff0fe582ebfd30ea9e4580313957fc1cac0ca7e0783f7ab5bf0fab69
ghostscript-x11-debuginfo-9.25-2.el8_0.2.i686.rpm	SHA-256: 05702a0f1e23401b69df80e3549f3003fbc5be378f61b27e95b5ee4d230f918d
ghostscript-x11-debuginfo-9.25-2.el8_0.2.x86_64.rpm	SHA-256: c38b0b8d556504bdaf378781d66ac2afca3ce9af13b7309103cd89350b36950d
libgs-9.25-2.el8_0.2.i686.rpm	SHA-256: b2c89eaa5be0b3f588fd3c75bf5fc68a4332ee3506eea2a5dc333f3e020e6b2b
libgs-9.25-2.el8_0.2.x86_64.rpm	SHA-256: 203f0b8ecf0640954c0643c942deb53ffd78de5020e20c9c8154111d108b38dd
libgs-debuginfo-9.25-2.el8_0.2.i686.rpm	SHA-256: ee75b5097fdf04584bfce997c64662124c274dbe54cff38cf2b952d5a3dcf556
libgs-debuginfo-9.25-2.el8_0.2.x86_64.rpm	SHA-256: 8bb1cf0ed8398fa8558dba1a4c42685d3dd64f74daaaf53ce5fbcaa750b5bafb

Red Hat CodeReady Linux Builder for x86_64 8

SRPM
x86_64
ghostscript-debuginfo-9.25-2.el8_0.2.i686.rpm	SHA-256: c7d2702dc4f9cc5a9daf8078b4e38d6311e193bbfe561d816877a3db4abbf9e1
ghostscript-debuginfo-9.25-2.el8_0.2.x86_64.rpm	SHA-256: 500041dad13421b95c706e16ec5d338a1759d372686f62f95c78e139564a1866
ghostscript-debugsource-9.25-2.el8_0.2.i686.rpm	SHA-256: 6eb99c59289cb77c6ee61227d8e6c3d99cf623176bf372530b8e5caf20d69b1c
ghostscript-debugsource-9.25-2.el8_0.2.x86_64.rpm	SHA-256: c5d55be9f1d8cfb0df2c977eef06c4ec17998e3844ac16d57741a74ab884eae4
ghostscript-doc-9.25-2.el8_0.2.noarch.rpm	SHA-256: 8d19849d523d0138c6dbb36063a29cd835dd6105d43b5e7a8a2160e7b544c8bf
ghostscript-gtk-debuginfo-9.25-2.el8_0.2.i686.rpm	SHA-256: 6b5b2c998309d5d1681d38bd2890015711736f1a8d8547ab0d99a673fdb1d9ca
ghostscript-gtk-debuginfo-9.25-2.el8_0.2.x86_64.rpm	SHA-256: 76ae0908ff0fe582ebfd30ea9e4580313957fc1cac0ca7e0783f7ab5bf0fab69
ghostscript-tools-dvipdf-9.25-2.el8_0.2.x86_64.rpm	SHA-256: 4ff85f83f1e06900ccdfe85e6e93fb2befbaeb697a91454ca47d5b03bc6eb00b
ghostscript-tools-fonts-9.25-2.el8_0.2.x86_64.rpm	SHA-256: 3bb65de594240b65752fa6bd5222750bc8f29ca90327271977e4e4091b4f780c
ghostscript-tools-printing-9.25-2.el8_0.2.x86_64.rpm	SHA-256: 228b5c43606c552eb616bcfd3eb886b331771ad4f4c0c03091c4fecb95d3eb6a
ghostscript-x11-9.25-2.el8_0.2.x86_64.rpm	SHA-256: 2e1838f0f077e0efdf5d6f4dc682ed06894ebe80cf576d47478118dff99e467b
ghostscript-x11-debuginfo-9.25-2.el8_0.2.i686.rpm	SHA-256: 05702a0f1e23401b69df80e3549f3003fbc5be378f61b27e95b5ee4d230f918d
ghostscript-x11-debuginfo-9.25-2.el8_0.2.x86_64.rpm	SHA-256: c38b0b8d556504bdaf378781d66ac2afca3ce9af13b7309103cd89350b36950d
libgs-debuginfo-9.25-2.el8_0.2.i686.rpm	SHA-256: ee75b5097fdf04584bfce997c64662124c274dbe54cff38cf2b952d5a3dcf556
libgs-debuginfo-9.25-2.el8_0.2.x86_64.rpm	SHA-256: 8bb1cf0ed8398fa8558dba1a4c42685d3dd64f74daaaf53ce5fbcaa750b5bafb
libgs-devel-9.25-2.el8_0.2.i686.rpm	SHA-256: 17a86a2e1164e431d1f4f2991e8d75f36ae9b3f04a4adf05188c08f1b60efbc1
libgs-devel-9.25-2.el8_0.2.x86_64.rpm	SHA-256: 96618b498eaa403b8ac2704bde70167f436822e829ad498900b0c03190166db2

Red Hat CodeReady Linux Builder for Power, little endian 8

SRPM
ppc64le
ghostscript-debuginfo-9.25-2.el8_0.2.ppc64le.rpm	SHA-256: 0d988411bbad8e45057182b8d89a700bf892397a7ad974e001a19dbb3b98c720
ghostscript-debugsource-9.25-2.el8_0.2.ppc64le.rpm	SHA-256: 6ecd6d60b0786d7799113b79fada45062c5fd2a6359b148bb0c215f264ef1182
ghostscript-doc-9.25-2.el8_0.2.noarch.rpm	SHA-256: 8d19849d523d0138c6dbb36063a29cd835dd6105d43b5e7a8a2160e7b544c8bf
ghostscript-gtk-debuginfo-9.25-2.el8_0.2.ppc64le.rpm	SHA-256: c722e29cc50cdc2d32f5b6127d0ece54bdd9814f8a25bad5f89911ec74e4d15c
ghostscript-tools-dvipdf-9.25-2.el8_0.2.ppc64le.rpm	SHA-256: 0f959b920c95702bed0978f83d832e57fd2bfdf6479edc4051bc5f2e76519df2
ghostscript-tools-fonts-9.25-2.el8_0.2.ppc64le.rpm	SHA-256: 81e6953cffc6a13d8addb6450b95fdd889c0c379f4eb40483bec620a82ae0838
ghostscript-tools-printing-9.25-2.el8_0.2.ppc64le.rpm	SHA-256: b96efb66d56ddd2ff441837573825a18ab1c556d7f822b4239761bbadef0c7c3
ghostscript-x11-9.25-2.el8_0.2.ppc64le.rpm	SHA-256: b28b4372e41f6d5dc3e61da5cca28cc3730881686dcd0a970b85c3518aef8747
ghostscript-x11-debuginfo-9.25-2.el8_0.2.ppc64le.rpm	SHA-256: 74602881dd9ea90105d805f4a92fbbcb330f13567a53b58492b1888ec0ec2622
libgs-debuginfo-9.25-2.el8_0.2.ppc64le.rpm	SHA-256: a380f85335d4648a30dc072be8e203653cd60de9fab768171aedafc04e00296c
libgs-devel-9.25-2.el8_0.2.ppc64le.rpm	SHA-256: f01cd496c8f77d31f8d019d364921ee21842d7f629dc7da7c42bbf343391f1ba

Red Hat CodeReady Linux Builder for ARM 64 8

SRPM
aarch64
ghostscript-debuginfo-9.25-2.el8_0.2.aarch64.rpm	SHA-256: 945c6aa4b030429dabd9d4f5759e075e97299450ed288867e9184da70bda897d
ghostscript-debugsource-9.25-2.el8_0.2.aarch64.rpm	SHA-256: 17e703b1ab6aff17f0e1439c4a58e796d360a01e97b46d0ab1eaafb550f9b625
ghostscript-doc-9.25-2.el8_0.2.noarch.rpm	SHA-256: 8d19849d523d0138c6dbb36063a29cd835dd6105d43b5e7a8a2160e7b544c8bf
ghostscript-gtk-debuginfo-9.25-2.el8_0.2.aarch64.rpm	SHA-256: 964f0b570cd5f1be81241d5401f5c9ac13ddda1beccee74d20831cbe73f9fe45
ghostscript-tools-dvipdf-9.25-2.el8_0.2.aarch64.rpm	SHA-256: 4a74dc9d5c98bf32ec14af2b9ddf6a307095edca006eba2087b94103f9079750
ghostscript-tools-fonts-9.25-2.el8_0.2.aarch64.rpm	SHA-256: c03927d6b251f2a714deb57521a3214c9bb2e4b76ca1b9cac811d53544a34433
ghostscript-tools-printing-9.25-2.el8_0.2.aarch64.rpm	SHA-256: 378a20adb6c7c82cffb692a46fac0459ac49318df166274cab07655d4c1f3bfa
ghostscript-x11-9.25-2.el8_0.2.aarch64.rpm	SHA-256: 5c16cdf6b0cd89c072534e39ce330abc0104f0af87ff5dbca217d78099f119be
ghostscript-x11-debuginfo-9.25-2.el8_0.2.aarch64.rpm	SHA-256: 41936ebe904e7b1f483660bd02afb0e64586e5b0cb33df656c4011ac75183478
libgs-debuginfo-9.25-2.el8_0.2.aarch64.rpm	SHA-256: 278d0b078fd7a7446724d2374e37a12252301042948667c84419df62eb7ff077
libgs-devel-9.25-2.el8_0.2.aarch64.rpm	SHA-256: f712e51e2c0a0df99e093360fcc56e240b72906a80042d9304c679cef29c2d0a

Red Hat CodeReady Linux Builder for IBM z Systems 8

SRPM
s390x
ghostscript-debuginfo-9.25-2.el8_0.2.s390x.rpm	SHA-256: f036ae9820e0e978382d71778d0f67f8dd007fb14f202de71679d5609677d8f3
ghostscript-debugsource-9.25-2.el8_0.2.s390x.rpm	SHA-256: 7c8aa0ec35c38213020e6905610aa89a6977f1ed7a9c195a7838f624f1d666a5
ghostscript-doc-9.25-2.el8_0.2.noarch.rpm	SHA-256: 8d19849d523d0138c6dbb36063a29cd835dd6105d43b5e7a8a2160e7b544c8bf
ghostscript-gtk-debuginfo-9.25-2.el8_0.2.s390x.rpm	SHA-256: a7e4fc4bbb77ed4a31410b7e67dda68e430f3a11db33c43f56c8594e1320533f
ghostscript-tools-dvipdf-9.25-2.el8_0.2.s390x.rpm	SHA-256: a6be74bd1945ca493ef37d9b7f8c3f8d7c12a409094ee0e37bce0433b3b2167b
ghostscript-tools-fonts-9.25-2.el8_0.2.s390x.rpm	SHA-256: 4485e0f54d2d0d59f27fd269dba57551686bccb88cbc3cc01a91258b7eb51c97
ghostscript-tools-printing-9.25-2.el8_0.2.s390x.rpm	SHA-256: 3c5b0efca0af1bbd48827a1bbc13ffa2bb817feaa7e206e0b507d665ec11b911
ghostscript-x11-9.25-2.el8_0.2.s390x.rpm	SHA-256: 5c3dc6c37a58110ed943e5afa735d98c220f2b25c9992dbae9c4844720476e3f
ghostscript-x11-debuginfo-9.25-2.el8_0.2.s390x.rpm	SHA-256: ecbabf0b825920ef47ac496c8199916412b901dec3aac668b3a9356e163ea7c8
libgs-debuginfo-9.25-2.el8_0.2.s390x.rpm	SHA-256: 4c27f34bed5f57c9bd8d44f0089fdfb7d126bce571ee22c40fc019b55b3c0045
libgs-devel-9.25-2.el8_0.2.s390x.rpm	SHA-256: 247359e41c28e941e61bb78f07f2a2458b9df4693c437e1395cfedcb01a617ec