Hello All,

As you might know recently multiple RCE vulnerabilities were found in
Ghostscript binaries (being used by Imagemagick to convert PDF to images)

All main distros are affected.
Attacker can execute arbitrary code on your server as user being used to
run OM

It is recommended to remove ghostscript installed using package managers
and recompile latest (patched) version from sources

Report:  https://www.kb.cert.org/vuls/id/332928
Compilation instructions: https://www.ghostscript.com/doc/9.24/Install.htm

All versions prior to 9.24 are vulnerable

-- 
WBR
Maxim aka solomax

Reply via email to