Red Hat Security AdvisoryRHSA-2023:4324
ghostscript security update
Released 2023-07-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.0) ghostscript-9.54.0-7.el9_0.1, ghostscript-tools-fonts-9.54.0-7.el9_0.1, ghostscript-tools-printing-9.54.0-7.el9_0.1 +1
- Red Hat Enterprise Linux AppStream EUS (v.9.0) ghostscript-9.54.0-7.el9_0.1, ghostscript-doc-9.54.0-7.el9_0.1, ghostscript-tools-dvipdf-9.54.0-7.el9_0.1 +4
Fixes 1 record
Priority MEDIUM 43
Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0385 · Published 2023-06-25 · Partial fix CWE-552
