Red Hat Security AdvisoryRHSA-2024:6197
ghostscript security update
Released 2024-09-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) ghostscript-9.54.0-17.el9_4, ghostscript-doc-9.54.0-17.el9_4, ghostscript-tools-dvipdf-9.54.0-17.el9_4 +4
- Red Hat Enterprise Linux CRB (v. 9) ghostscript-9.54.0-17.el9_4, ghostscript-tools-fonts-9.54.0-17.el9_4, ghostscript-tools-printing-9.54.0-17.el9_4 +1
Fixes 3 records
Priority MEDIUM 61
Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.
CVSS 3.1MEDIUM 6.3· Local · No auth · User interaction · EPSS 0.27974 · Published 2024-07-03 · Partial fix CWE-693
Priority LOW 29
An issue was discovered in Artifex Ghostscript before 10.03.1.
CVSS 3.1MEDIUM 6.3· Adjacent network · No auth · No interaction · EPSS 0.00515 · Published 2024-07-03 · Partial fix CWE-22
Priority LOW 24
An issue was discovered in Artifex Ghostscript before 10.03.1.
CVSS 3.1MEDIUM 5.3· Local · No auth · User interaction · EPSS 0.00454 · Published 2024-07-03 · Partial fix CWE-22
