========================================================================== Ubuntu Security Notice USN-7473-1 May 01, 2025
ghostscript vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.10 - Ubuntu 24.04 LTS Summary: Ghostscript could be made to crash, run programs, or read files if it opened a specially crafted file. Software Description: - ghostscript: PostScript and PDF interpreter Details: It was discovered that Ghostscript incorrectly handled parsing certain PS files. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly bypass file path validation. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.10 ghostscript 10.03.1~dfsg1-0ubuntu2.3 libgs10 10.03.1~dfsg1-0ubuntu2.3 Ubuntu 24.04 LTS ghostscript 10.02.1~dfsg1-0ubuntu7.6 libgs10 10.02.1~dfsg1-0ubuntu7.6 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7473-1 CVE-2025-46646 Package Information: https://launchpad.net/ubuntu/+source/ghostscript/10.03.1~dfsg1-0ubuntu2.3 https://launchpad.net/ubuntu/+source/ghostscript/10.02.1~dfsg1-0ubuntu7.6
OpenPGP_signature.asc
Description: OpenPGP digital signature
