Red Hat Security AdvisoryRHSA-2023:5459
ghostscript security update
Released 2023-10-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) ghostscript-9.54.0-10.el9_2, ghostscript-doc-9.54.0-10.el9_2, ghostscript-tools-dvipdf-9.54.0-10.el9_2 +4
- Red Hat Enterprise Linux CRB (v. 9) ghostscript-9.54.0-10.el9_2, ghostscript-tools-fonts-9.54.0-10.el9_2, ghostscript-tools-printing-9.54.0-10.el9_2 +1
Fixes 1 record
Priority MEDIUM 43
Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0385 · Published 2023-06-25 · Partial fix CWE-552
