Summary
[9.27-11]
- fix for CVE-2023-4042
- Resolves: rhbz#2228153
[9.27-10]
- fix for CVE-2023-38559
- Resolves: rhbz#2224371
[9.27-9]
- fix for CVE-2023-28879
- Resolves: rhbz#2188297
[9.27-8]
- fix embedding of CIDFonts
- Resolves: rhbz#2169890
[9.27-7]
- fix bbox device calculating bounding box incorrectly
- Resolves: rhbz#2176327
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | ghostscript | 0:9.27-11.el8 |
| Oracle Linux · 8 | ghostscript-doc | 0:9.27-11.el8 |
| Oracle Linux · 8 | ghostscript-tools-dvipdf | 0:9.27-11.el8 |
| Oracle Linux · 8 | ghostscript-tools-fonts | 0:9.27-11.el8 |
| Oracle Linux · 8 | ghostscript-tools-printing | 0:9.27-11.el8 |
| Oracle Linux · 8 | ghostscript-x11 | 0:9.27-11.el8 |
| Oracle Linux · 8 | libgs | 0:9.27-11.el8 |
| Oracle Linux · 8 | libgs-devel | 0:9.27-11.el8 |
Vulnerabilities 3
-
Critical 9.8
In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to …
-
Medium 5.5
Ghostscript: out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in dos
A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs.
-
Medium 5.5
Ghostscript: incomplete fix for cve-2020-16305
A flaw was found in ghostscript. The fix for CVE-2020-16305 in ghostscript was not included in RHSA-2021:1852-06 advisory as it was claimed to be. This issue only affects the ghostscript package as shipped with Red Hat Enterprise Linux 8.