Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-52722: An issue was discovered in Artifex Ghostscript through 10.01.0. psi/zmisc1.c, when SAFER mode is used, allows eexec seeds other than the Type 1 standard.
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | ghostscript | 0:9.54.0-9.amzn2.0.2 |
| Amazon Linux · 2 | ghostscript-cups | 0:9.54.0-9.amzn2.0.2 |
| Amazon Linux · 2 | ghostscript-debuginfo | 0:9.54.0-9.amzn2.0.2 |
| Amazon Linux · 2 | ghostscript-doc | 0:9.54.0-9.amzn2.0.2 |
| Amazon Linux · 2 | ghostscript-gtk | 0:9.54.0-9.amzn2.0.2 |
| Amazon Linux · 2 | libgs | 0:9.54.0-9.amzn2.0.2 |
| Amazon Linux · 2 | libgs-devel | 0:9.54.0-9.amzn2.0.2 |
Vulnerabilities 1
-
Medium 5.5
An issue was discovered in Artifex Ghostscript before 10.03.1. psi/zmisc1.c, when SAFER mode is used, allows eexec seed…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-52722.html