Skip to content
OpenAdvisories
Medium ALAS2-2023-2308 2 CVEs

Moderate: ghostscript security update (Amazon Linux 2)

Published Oct 12, 2023 · Updated Oct 19, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-21710: A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file. CVE-2020-16294: A buffer overflow vulnerability in epsc_print_page() in devices/gdevepsc.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.

Fixed packages 7

ReleasePackageFixed in
Amazon Linux · 2 ghostscript 0:9.25-5.amzn2.0.7
Amazon Linux · 2 ghostscript-cups 0:9.25-5.amzn2.0.7
Amazon Linux · 2 ghostscript-debuginfo 0:9.25-5.amzn2.0.7
Amazon Linux · 2 ghostscript-doc 0:9.25-5.amzn2.0.7
Amazon Linux · 2 ghostscript-gtk 0:9.25-5.amzn2.0.7
Amazon Linux · 2 libgs 0:9.25-5.amzn2.0.7
Amazon Linux · 2 libgs-devel 0:9.25-5.amzn2.0.7

Vulnerabilities 2

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2020-16294.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2020-21710.html