Red Hat Security AdvisoryRHSA-2024:6466
ghostscript security update
Released 2024-09-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.2) ghostscript-9.54.0-12.el9_2.2, ghostscript-tools-fonts-9.54.0-12.el9_2.2, ghostscript-tools-printing-9.54.0-12.el9_2.2 +1
- Red Hat Enterprise Linux AppStream EUS (v.9.2) ghostscript-9.54.0-12.el9_2.2, ghostscript-doc-9.54.0-12.el9_2.2, ghostscript-tools-dvipdf-9.54.0-12.el9_2.2 +4
Fixes 3 records
Priority MEDIUM 61
Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.
CVSS 3.1MEDIUM 6.3· Local · No auth · User interaction · EPSS 0.27974 · Published 2024-07-03 · Partial fix CWE-693
Priority LOW 29
An issue was discovered in Artifex Ghostscript before 10.03.1.
CVSS 3.1MEDIUM 6.3· Adjacent network · No auth · No interaction · EPSS 0.00515 · Published 2024-07-03 · Partial fix CWE-22
Priority LOW 24
An issue was discovered in Artifex Ghostscript before 10.03.1.
CVSS 3.1MEDIUM 5.3· Local · No auth · User interaction · EPSS 0.00454 · Published 2024-07-03 · Partial fix CWE-22
