Skip to content
OpenAdvisories
Unscored RHSA-2009:0421 4 CVEs

Red Hat Security Advisory: ghostscript security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Fixed packages 10

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client ghostscript 0:8.15.2-9.4.el5_3.7
Red Hat · RHEL 5 enterprise_linux:5::client ghostscript-debuginfo 0:8.15.2-9.4.el5_3.7
Red Hat · RHEL 5 enterprise_linux:5::client ghostscript-gtk 0:8.15.2-9.4.el5_3.7
Red Hat · RHEL 5 enterprise_linux:5::client_workstation ghostscript 0:8.15.2-9.4.el5_3.7
Red Hat · RHEL 5 enterprise_linux:5::client_workstation ghostscript-debuginfo 0:8.15.2-9.4.el5_3.7
Red Hat · RHEL 5 enterprise_linux:5::client_workstation ghostscript-devel 0:8.15.2-9.4.el5_3.7
Red Hat · RHEL 5 enterprise_linux:5::server ghostscript 0:8.15.2-9.4.el5_3.7
Red Hat · RHEL 5 enterprise_linux:5::server ghostscript-debuginfo 0:8.15.2-9.4.el5_3.7
Red Hat · RHEL 5 enterprise_linux:5::server ghostscript-devel 0:8.15.2-9.4.el5_3.7
Red Hat · RHEL 5 enterprise_linux:5::server ghostscript-gtk 0:8.15.2-9.4.el5_3.7

Vulnerabilities 4

  • Unscored —

    The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a…

  • Unscored —

    Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers…

  • Unscored —

    Heap-based buffer overflow in the big2_decode_symbol_dict function (jbig2_symbol_dict.c) in the JBIG2 decoding library …

  • Unscored —

    Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=491853
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=493379
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=493442
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=493445
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0421.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-6725
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-6725
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-6725
  • report
    https://access.redhat.com/security/cve/CVE-2008-6679
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-6679
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-6679
  • report
    https://access.redhat.com/security/cve/CVE-2009-0196
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0196
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0196
  • report
    https://access.redhat.com/security/cve/CVE-2009-0792
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0792
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0792