Red Hat Security AdvisoryRHSA-2023:6544
ghostscript security and bug fix update
Released 2023-11-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 9) ghostscript-9.54.0-13.el9, ghostscript-tools-fonts-9.54.0-13.el9, ghostscript-tools-printing-9.54.0-13.el9 +1
- Red Hat Enterprise Linux AppStream (v. 9) ghostscript-9.54.0-13.el9, ghostscript-doc-9.54.0-13.el9, ghostscript-tools-dvipdf-9.54.0-13.el9 +4
Fixes 2 records
Priority HIGH 82
In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06341 · Published 2023-03-31 · Partial fix CWE-787
Priority LOW 25
A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00435 · Published 2023-08-01 · Partial fix · 9.27-11.el8, 9.54.0-13.el9 CWE-125
