Fixed packages 18
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | ghostscript | 0:9.27-11.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | ghostscript-debuginfo | 0:9.27-11.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | ghostscript-debugsource | 0:9.27-11.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | ghostscript-gtk-debuginfo | 0:9.27-11.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | ghostscript-x11 | 0:9.27-11.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | ghostscript-x11-debuginfo | 0:9.27-11.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | libgs | 0:9.27-11.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | libgs-debuginfo | 0:9.27-11.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | ghostscript-debuginfo | 0:9.27-11.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | ghostscript-debugsource | 0:9.27-11.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | ghostscript-doc | 0:9.27-11.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | ghostscript-gtk-debuginfo | 0:9.27-11.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | ghostscript-tools-dvipdf | 0:9.27-11.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | ghostscript-tools-fonts | 0:9.27-11.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | ghostscript-tools-printing | 0:9.27-11.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | ghostscript-x11-debuginfo | 0:9.27-11.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | libgs-debuginfo | 0:9.27-11.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | libgs-devel | 0:9.27-11.el8 |
Vulnerabilities 3
-
Critical 9.8
In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to …
-
Medium 5.5
Ghostscript: out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in dos
A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs.
-
Medium 5.5
Ghostscript: incomplete fix for cve-2020-16305
A flaw was found in ghostscript. The fix for CVE-2020-16305 in ghostscript was not included in RHSA-2021:1852-06 advisory as it was claimed to be. This issue only affects the ghostscript package as shipped with Red Hat Enterprise Linux 8.
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.9_release_notes/index
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2184585
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2224367
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2228151
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7053.json
-
report
https://access.redhat.com/security/cve/CVE-2023-4042
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-4042
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-4042
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1870257
-
report
https://access.redhat.com/security/cve/CVE-2023-28879
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-28879
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-28879
-
article
https://artifex.com/news/critical-security-vulnerability-fixed-in-ghostscript
-
article
https://offsec.almond.consulting/ghostscript-cve-2023-28879.html
-
article
https://www.openwall.com/lists/oss-security/2023/04/12/4
-
report
https://access.redhat.com/security/cve/CVE-2023-38559
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-38559
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-38559
-
article
https://bugs.ghostscript.com/show_bug.cgi?id=706897
-
article
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=d81b82c70bc1