Summary
[9.54.0-13]
- fix for CVE-2023-38559
- Resolves: rhbz#2224372
[9.54.0-12]
- fix for CVE-2023-36664
- Resolves: rhbz#2217810
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | ghostscript | 0:9.54.0-13.el9 |
| Oracle Linux · 9 | ghostscript-doc | 0:9.54.0-13.el9 |
| Oracle Linux · 9 | ghostscript-tools-dvipdf | 0:9.54.0-13.el9 |
| Oracle Linux · 9 | ghostscript-tools-fonts | 0:9.54.0-13.el9 |
| Oracle Linux · 9 | ghostscript-tools-printing | 0:9.54.0-13.el9 |
| Oracle Linux · 9 | ghostscript-x11 | 0:9.54.0-13.el9 |
| Oracle Linux · 9 | libgs | 0:9.54.0-13.el9 |
| Oracle Linux · 9 | libgs-devel | 0:9.54.0-13.el9 |
Vulnerabilities 2
-
Critical 9.8
In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to …
-
Medium 5.5
Ghostscript: out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in dos
A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs.