Linux · Security advisory · May 25, 2021

ELSA-2021-1852: Security update for 8 packages

ELSA-2021-1852, released May 25, 2021, fixes 26 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0228

83rd percentile

Priority of the 26 CVEs

Patch now 0
                                Urgent 0
                                High 1
                                Routine 25

Fixed package versions

Product	Release	Fixed in
ghostscript	ol 8	0:9.27-1.el8
ghostscript-doc	ol 8	0:9.27-1.el8
ghostscript-tools-dvipdf	ol 8	0:9.27-1.el8
ghostscript-tools-fonts	ol 8	0:9.27-1.el8
ghostscript-tools-printing	ol 8	0:9.27-1.el8
ghostscript-x11	ol 8	0:9.27-1.el8
libgs	ol 8	0:9.27-1.el8
libgs-devel	ol 8	0:9.27-1.el8

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2020-16303	ghostscript: The Ghostscript suite contains utilities for rendering PostScript and PDF documents	7.8	0.0181	None reported
Routine	CVE-2020-16291	ghostscript: The Ghostscript suite contains utilities for rendering PostScript and PDF documents	5.5	0.0228	None reported
Routine	CVE-2020-16297	ghostscript: The Ghostscript suite contains utilities for rendering PostScript and PDF documents	5.5	0.0228	None reported
Routine	CVE-2020-16305	ghostscript: The Ghostscript suite contains utilities for rendering PostScript and PDF documents	5.5	0.0225	None reported
Routine	CVE-2020-16296	ghostscript: The Ghostscript suite contains utilities for rendering PostScript and PDF documents	5.5	0.0205	None reported
Routine	CVE-2020-16288	ghostscript: The Ghostscript suite contains utilities for rendering PostScript and PDF documents	5.5	0.0200	None reported
Routine	CVE-2020-16289	ghostscript: The Ghostscript suite contains utilities for rendering PostScript and PDF documents	5.5	0.0199	None reported
Routine	CVE-2020-16290	ghostscript: The Ghostscript suite contains utilities for rendering PostScript and PDF documents	5.5	0.0199	None reported
Routine	CVE-2020-16292	ghostscript: The Ghostscript suite contains utilities for rendering PostScript and PDF documents	5.5	0.0199	None reported
Routine	CVE-2020-16298	ghostscript: The Ghostscript suite contains utilities for rendering PostScript and PDF documents	5.5	0.0199	None reported
Routine	CVE-2020-16300	ghostscript: The Ghostscript suite contains utilities for rendering PostScript and PDF documents	5.5	0.0199	None reported
Routine	CVE-2020-16304	ghostscript: The Ghostscript suite contains utilities for rendering PostScript and PDF documents	5.5	0.0193	None reported
Routine	CVE-2020-17538	ghostscript: The Ghostscript suite contains utilities for rendering PostScript and PDF documents	5.5	0.0193	None reported
Routine	CVE-2020-16301	ghostscript: The Ghostscript suite contains utilities for rendering PostScript and PDF documents	5.5	0.0191	None reported
Routine	CVE-2020-16287	ghostscript: The Ghostscript suite contains utilities for rendering PostScript and PDF documents	5.5	0.0187	None reported
Routine	CVE-2020-16294	ghostscript: The Ghostscript suite contains utilities for rendering PostScript and PDF documents	5.5	0.0187	None reported
Routine	CVE-2020-16302	ghostscript: The Ghostscript suite contains utilities for rendering PostScript and PDF documents	5.5	0.0187	None reported
Routine	CVE-2020-16308	ghostscript: The Ghostscript suite contains utilities for rendering PostScript and PDF documents	5.5	0.0187	None reported
Routine	CVE-2020-16309	ghostscript: The Ghostscript suite contains utilities for rendering PostScript and PDF documents	5.5	0.0187	None reported
Routine	CVE-2020-16299	ghostscript: The Ghostscript suite contains utilities for rendering PostScript and PDF documents	5.5	0.0183	None reported
Routine	CVE-2020-16293	ghostscript: The Ghostscript suite contains utilities for rendering PostScript and PDF documents	5.5	0.0178	None reported
Routine	CVE-2020-16295	ghostscript: The Ghostscript suite contains utilities for rendering PostScript and PDF documents	5.5	0.0178	None reported
Routine	CVE-2020-16306	ghostscript: The Ghostscript suite contains utilities for rendering PostScript and PDF documents	5.5	0.0178	None reported
Routine	CVE-2020-16307	ghostscript-tools-fonts: The Ghostscript suite contains utilities for rendering PostScript and PDF documents	5.5	0.0178	None reported
Routine	CVE-2020-16310	ghostscript: The Ghostscript suite contains utilities for rendering PostScript and PDF documents	5.5	0.0178	None reported

Also fixes CVE-2020-16303

RHSA-2021:1852
ghostscript, ghostscript-doc, ghostscript-tools-dvipdf and 5 more on RHEL 8
ghostscript 9.26~dfsg+0-0ubuntu0.18.04.13
ghostscript on Ubuntu 18.04.6 LTS (bionic)
ghostscript 9.50~dfsg-5ubuntu4.2
ghostscript on Ubuntu 20.04 LTS (focal)
ghostscript-x 9.26~dfsg+0-0ubuntu0.18.04.13
ghostscript-x on Ubuntu 18.04.6 LTS (bionic)
ghostscript-x 9.50~dfsg-5ubuntu4.2
ghostscript-x on Ubuntu 20.04 LTS (focal)
libgs9 9.26~dfsg+0-0ubuntu0.18.04.13
libgs9 on Ubuntu 18.04.6 LTS (bionic)
libgs9 9.50~dfsg-5ubuntu4.2
libgs9 on Ubuntu 20.04 LTS (focal)
libgs9-common 9.26~dfsg+0-0ubuntu0.18.04.13
libgs9-common on Ubuntu 18.04.6 LTS (bionic)

Vendor advisory

https://linux.oracle.com/errata/ELSA-2021-1852.html

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo