Red Hat Security Advisory: ghostscript security, bug fix, and enhancement update

Fixed packages 18

Vulnerabilities 26

• Unscored —
  CVE-2020-14373

  A use after free was found in igc_reloc_struct_ptr() of psi/igc.c of ghostscript-9.25. A local attacker could supply a …

  ghostscript Debian
  Sep 3, 2020
• Unscored —
  CVE-2020-16287

  A buffer overflow vulnerability in lprn_is_black() in contrib/lips4/gdevlprn.c of Artifex Software GhostScript v9.50 al…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Aug 13, 2020
• Unscored —
  CVE-2020-16288

  A buffer overflow vulnerability in pj_common_print_page() in devices/gdevpjet.c of Artifex Software GhostScript v9.50 a…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Aug 13, 2020
• Unscored —
  CVE-2020-16289

  A buffer overflow vulnerability in cif_print_page() in devices/gdevcif.c of Artifex Software GhostScript v9.50 allows a…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Aug 13, 2020
• Unscored —
  CVE-2020-16290

  A buffer overflow vulnerability in jetp3852_print_page() in devices/gdev3852.c of Artifex Software GhostScript v9.50 al…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Aug 13, 2020
• Unscored —
  CVE-2020-16291

  A buffer overflow vulnerability in contrib/gdevdj9.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote att…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Aug 13, 2020
• Unscored —
  CVE-2020-16292

  A buffer overflow vulnerability in mj_raster_cmd() in contrib/japanese/gdevmjc.c of Artifex Software GhostScript v9.50 …

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Aug 13, 2020
• Unscored —
  CVE-2020-16293

  A null pointer dereference vulnerability in compose_group_nonknockout_nonblend_isolated_allmask_common() in base/gxblen…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Aug 13, 2020
• Unscored —
  CVE-2020-16294

  A buffer overflow vulnerability in epsc_print_page() in devices/gdevepsc.c of Artifex Software GhostScript v9.50 allows…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Aug 13, 2020
• Unscored —
  CVE-2020-16295

  A null pointer dereference vulnerability in clj_media_size() in devices/gdevclj.c of Artifex Software GhostScript v9.50…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Aug 13, 2020
• Unscored —
  CVE-2020-16296

  A buffer overflow vulnerability in GetNumWrongData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Aug 13, 2020
• Unscored —
  CVE-2020-16297

  A buffer overflow vulnerability in FloydSteinbergDitheringC() in contrib/gdevbjca.c of Artifex Software GhostScript v9.…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Aug 13, 2020
• Unscored —
  CVE-2020-16298

  A buffer overflow vulnerability in mj_color_correct() in contrib/japanese/gdevmjc.c of Artifex Software GhostScript v9.…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Aug 13, 2020
• Unscored —
  CVE-2020-16299

  A Division by Zero vulnerability in bj10v_print_page() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Aug 13, 2020
• Unscored —
  CVE-2020-16300

  A buffer overflow vulnerability in tiff12_print_page() in devices/gdevtfnx.c of Artifex Software GhostScript v9.50 allo…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Aug 13, 2020
• Unscored —
  CVE-2020-16301

  A buffer overflow vulnerability in okiibm_print_page1() in devices/gdevokii.c of Artifex Software GhostScript v9.50 all…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Aug 13, 2020
• Unscored —
  CVE-2020-16302

  A buffer overflow vulnerability in jetp3852_print_page() in devices/gdev3852.c of Artifex Software GhostScript v9.50 al…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Aug 13, 2020
• Unscored —
  CVE-2020-16303

  A use-after-free vulnerability in xps_finish_image_path() in devices/vector/gdevxps.c of Artifex Software GhostScript v…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Aug 13, 2020
• Unscored —
  CVE-2020-16304

  A buffer overflow vulnerability in image_render_color_thresh() in base/gxicolor.c of Artifex Software GhostScript v9.18…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Aug 13, 2020
• Unscored —
  CVE-2020-16305

  A buffer overflow vulnerability in pcx_write_rle() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 …

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Aug 13, 2020
• Unscored —
  CVE-2020-16306

  A null pointer dereference vulnerability in devices/gdevtsep.c of Artifex Software GhostScript v9.50 allows a remote at…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Aug 13, 2020
• Unscored —
  CVE-2020-16307

  A null pointer dereference vulnerability in devices/vector/gdevtxtw.c and psi/zbfont.c of Artifex Software GhostScript …

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Aug 13, 2020
• Unscored —
  CVE-2020-16308

  A buffer overflow vulnerability in p_print_image() in devices/gdevcdj.c of Artifex Software GhostScript v9.50 allows a …

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Aug 13, 2020
• Unscored —
  CVE-2020-16309

  A buffer overflow vulnerability in lxm5700m_print_page() in devices/gdevlxm.c of Artifex Software GhostScript v9.50 all…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Aug 13, 2020
• Unscored —
  CVE-2020-16310

  A division by zero vulnerability in dot24_print_page() in devices/gdevdm24.c of Artifex Software GhostScript v9.50 allo…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Aug 13, 2020
• Unscored —
  CVE-2020-17538

  A buffer overflow vulnerability in GetNumSameData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v9…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Aug 13, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1870149
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1870152
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1870159
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1870162
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1870165
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1870167
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1870169
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1870171
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1870175
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1870179
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1870227
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1870229
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1870231
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1870237
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1870240
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1870242
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1870244
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1870248
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1870249
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1870256
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1870257
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1870258
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1870262
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1870266
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1870267
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1873239
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1874523
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1899902
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1852.json
• report
  https://access.redhat.com/security/cve/CVE-2020-14373
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-14373
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-14373
• report
  https://access.redhat.com/security/cve/CVE-2020-16287
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-16287
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-16287
• report
  https://access.redhat.com/security/cve/CVE-2020-16288
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-16288