Red Hat Security AdvisoryRHSA-2025:7422
ghostscript security update
Released 2025-05-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) ghostscript-9.54.0-18.el9_6, ghostscript-doc-9.54.0-18.el9_6, ghostscript-tools-dvipdf-9.54.0-18.el9_6 +4
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) ghostscript-9.54.0-18.el9_6, ghostscript-tools-fonts-9.54.0-18.el9_6, ghostscript-tools-printing-9.54.0-18.el9_6 +1
Fixes 6 records
Priority LOW 39
An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00546 · Published 2024-11-10 · Partial fix CWE-22
Priority LOW 38
An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00316 · Published 2024-11-10 · Partial fix CWE-120
Priority LOW 36
An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00389 · Published 2024-11-10 · Partial fix CWE-125
Priority LOW 36
An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00388 · Published 2024-11-10 · Partial fix CWE-190
Priority LOW 36
An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00357 · Published 2024-11-10 · Partial fix CWE-824
Priority LOW 36
An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0153 · Published 2023-12-06 · Partial fix CWE-416
THREATIST.IORead the docs