USN-7138-1: Ghostscript vulnerabilities
It was discovered that Ghostscript incorrectly handled parsing certain PS files. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary code.
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-7138-1?
The severity of USN-7138-1 is significant as it allows for denial of service and potential arbitrary code execution.
How do I fix USN-7138-1?
To fix USN-7138-1, you need to upgrade to the patched versions of libgs9: 9.26~dfsg+0-0ubuntu0.18.04.18+esm3 for Ubuntu 18.04 or 9.26~dfsg+0-0ubuntu0.16.04.14+esm8 for Ubuntu 16.04.
What software is affected by USN-7138-1?
USN-7138-1 affects libgs9 versions prior to the specified patched versions on Ubuntu 16.04 and 18.04.
Can USN-7138-1 lead to data loss?
While USN-7138-1 primarily results in denial of service, exploiting it could potentially lead to data loss if arbitrary code execution occurs.
Is there a workaround for USN-7138-1?
Currently, there are no registered workarounds for USN-7138-1, so updating is the recommended action.