Red Hat Security Advisory

RHSA-2025:7499

ghostscript security update

Released 2025-05-13 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) ghostscript-10.02.1-15.el10_0, ghostscript-doc-10.02.1-15.el10_0, ghostscript-tools-fonts-10.02.1-15.el10_0 +2
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) ghostscript-tools-dvipdf-10.02.1-15.el10_0, libgs-devel-10.02.1-15.el10_0

TI-2024-31346 CVE-2024-46954 · GHSA-2v5c-72gh-q5f7

LOW 39

An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00546 Published 2024-11-10 Partial fix CWE-22

TI-2024-31344 CVE-2024-46952 · GHSA-mvm7-2x9x-6r3g

LOW 38

An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00316 Published 2024-11-10 Partial fix CWE-120

TI-2024-31348 CVE-2024-46956 · GHSA-jrvf-vccr-mvp6

LOW 36

An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00389 Published 2024-11-10 Partial fix CWE-125

TI-2024-31345 CVE-2024-46953 · GHSA-qxhf-m3mr-36x5

LOW 36

An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00388 Published 2024-11-10 Partial fix CWE-190

TI-2024-31343 CVE-2024-46951 · GHSA-38jp-8r92-cqg4

LOW 36

An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00357 Published 2024-11-10 Partial fix CWE-824