Summary
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.
Security Fix(es):
* ghostscript: dangling pointer in gdev_prn_open_printer_seekable() (CVE-2023-46751)
* ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling (CVE-2024-46952)
* ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space (CVE-2024-46951)
* ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding (CVE-2024-46954)
* ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript (CVE-2024-46953)
* ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution (CVE-2024-46956)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | ghostscript | 9.54.0-18.el9_6 |
| AlmaLinux · 9 | ghostscript-doc | 9.54.0-18.el9_6 |
| AlmaLinux · 9 | ghostscript-tools-dvipdf | 9.54.0-18.el9_6 |
| AlmaLinux · 9 | ghostscript-tools-fonts | 9.54.0-18.el9_6 |
| AlmaLinux · 9 | ghostscript-tools-printing | 9.54.0-18.el9_6 |
| AlmaLinux · 9 | ghostscript-x11 | 9.54.0-18.el9_6 |
| AlmaLinux · 9 | libgs | 9.54.0-18.el9_6 |
| AlmaLinux · 9 | libgs-devel | 9.54.0-18.el9_6 |
Vulnerabilities 6
-
High 8.4
An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during hand…
-
High 8.4
An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding…
-
High 7.8
An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation pointer in P…
-
High 7.8
An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the …
-
High 7.8
An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenamefora…
-
Unscored —
An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows …
References
-
report
https://access.redhat.com/security/cve/CVE-2023-46751
-
report
https://access.redhat.com/security/cve/CVE-2024-46951
-
report
https://access.redhat.com/security/cve/CVE-2024-46952
-
report
https://access.redhat.com/security/cve/CVE-2024-46953
-
report
https://access.redhat.com/security/cve/CVE-2024-46954
-
report
https://access.redhat.com/security/cve/CVE-2024-46956
-
report
https://bugzilla.redhat.com/2253365
-
report
https://bugzilla.redhat.com/2325041
-
report
https://bugzilla.redhat.com/2325043
-
report
https://bugzilla.redhat.com/2325044
-
report
https://bugzilla.redhat.com/2325045
-
report
https://bugzilla.redhat.com/2325047
-
advisory
https://errata.almalinux.org/9/ALSA-2025-7422.html