CVE-2019-3839

NameCVE-2019-3839
DescriptionIt was found that in ghostscript some privileged operators remained accessible from various places after the CVE-2019-6116 fix. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER. Ghostscript versions before 9.27 are vulnerable.
SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDLA-1792-1, DSA-4442-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
ghostscript (PTS)bookworm, bookworm (security)10.0.0~dfsg-11+deb12u8fixed
trixie (security), trixie10.05.1~dfsg-1+deb13u1fixed
forky, sid10.07.1~dfsg-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
ghostscriptsourcejessie9.26a~dfsg-0+deb8u3DLA-1792-1
ghostscriptsourcestretch9.26a~dfsg-0+deb9u3DSA-4442-1
ghostscriptsource(unstable)9.27~dfsg-1

Notes

https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4ec9ca74bed49f2a82acb4bf430eae0d8b3b75c9
To prevent pdf2dsc regression additionally:
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=db24f253409d5d085c2760c814c3e1d3fa2dac59
Search for package or bug name: Reporting problems