Red Hat Security AdvisoryRHSA-2025:4362
ghostscript security update
Released 2025-04-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) ghostscript-9.27-16.el8_10, ghostscript-x11-9.27-16.el8_10, libgs-9.27-16.el8_10
- Red Hat Enterprise Linux CRB (v. 8) ghostscript-doc-9.27-16.el8_10, ghostscript-tools-dvipdf-9.27-16.el8_10, ghostscript-tools-fonts-9.27-16.el8_10 +2
Fixes 7 records
Priority LOW 39
An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00546 · Published 2024-11-10 · Partial fix CWE-22
Priority LOW 38
An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00316 · Published 2024-11-10 · Partial fix CWE-120
Priority LOW 36
An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00389 · Published 2024-11-10 · Partial fix CWE-125
Priority LOW 36
An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00388 · Published 2024-11-10 · Partial fix CWE-190
Priority LOW 36
An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00357 · Published 2024-11-10 · Partial fix CWE-824
Priority LOW 36
An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0153 · Published 2023-12-06 · Partial fix CWE-416
Priority LOW 32
A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k.c file.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00468 · Published 2022-08-19 · Partial fix · 9.27-16.el8_10 CWE-119
THREATIST.IORead the docs