Continuing Ghostscript security concerns

Ghostscript patches have recently appeared which address security 
problems in Ghostscript discovered by Tavis Ormandy.  Tavis Ormandy 
has discovered yet another security issue in Ghostscript which is 
easily exploited and could be used as a step to taking over your 
system or otherwise causing harm.  A patch is for this is now 
available.  See 
https://www.openwall.com/lists/oss-security/2018/10/09/4 for details 
on this latest issue.

GraphicsMagick auto-detects Postscript and PDF files as well as uses 
Postscript output from other software for some format conversions. 
Postscript (e.g. EPS) may be embedded inside other file formats. 
GraphicsMagick still uses Ghostscript to render Postscript and PDF 
files into raster images.

Any site which might possibly open untrusted content needs to take 
great care that the latest Ghostscript patches are continually 
applied, or uninstall Ghostscript if possible.

Ghostscript is very complex so this may not be the last issue that we 
hear about.

Bob
-- 
Bob Friesenhahn
[email protected], http://www.simplesystems.org/users/bfriesen/
GraphicsMagick Maintainer,    http://www.GraphicsMagick.org/