Skip to content
OpenAdvisories
High ALAS2-2024-2422 1 CVE

Important: ghostscript security update (Amazon Linux 2)

Published Jan 19, 2024 · Updated Jan 22, 2024

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-46751: An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.

Fixed packages 7

ReleasePackageFixed in
Amazon Linux · 2 ghostscript 0:9.25-5.amzn2.0.8
Amazon Linux · 2 ghostscript-cups 0:9.25-5.amzn2.0.8
Amazon Linux · 2 ghostscript-debuginfo 0:9.25-5.amzn2.0.8
Amazon Linux · 2 ghostscript-doc 0:9.25-5.amzn2.0.8
Amazon Linux · 2 ghostscript-gtk 0:9.25-5.amzn2.0.8
Amazon Linux · 2 libgs 0:9.25-5.amzn2.0.8
Amazon Linux · 2 libgs-devel 0:9.25-5.amzn2.0.8

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-46751.html