Red Hat Security Advisory: ghostscript security update

Fixed packages 11

Vulnerabilities 5

• High 8.4
  CVE-2024-46952

  An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during hand…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Nov 10, 2024
• High 8.4
  CVE-2024-46954

  An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Nov 10, 2024
• High 7.8
  CVE-2024-46951

  An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation pointer in P…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Nov 10, 2024
• High 7.8
  CVE-2024-46953

  An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the …

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Nov 10, 2024
• High 7.8
  CVE-2024-46956

  An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenamefora…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Nov 10, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2325041
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2325043
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2325044
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2325045
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2325047
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7499.json
• report
  https://access.redhat.com/security/cve/CVE-2024-46951
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-46951
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-46951
• article
  https://bugs.ghostscript.com/show_bug.cgi?id=707991
• article
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f49812186baa7d1362880673408a6fbe8719b4f8
• article
  https://github.com/ArtifexSoftware/ghostpdl/blob/master/doc/News.html
• article
  https://www.suse.com/support/update/announcement/2024/suse-su-20243942-1/
• report
  https://access.redhat.com/security/cve/CVE-2024-46952
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-46952
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-46952
• article
  https://bugs.ghostscript.com/show_bug.cgi?id=708001
• article
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=b1f0827c30f59a2dcbc8a39e42cace7a1de35f7f
• report
  https://access.redhat.com/security/cve/CVE-2024-46953
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-46953
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-46953
• article
  https://bugs.ghostscript.com/show_bug.cgi?id=707793
• article
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=1f21a45df0fa3abec4cff12951022b192dda3c00
• report
  https://access.redhat.com/security/cve/CVE-2024-46954
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-46954
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-46954
• article
  https://bugs.ghostscript.com/show_bug.cgi?id=707788
• article
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=55f587dd039282316f512e1bea64218fd991f934
• report
  https://access.redhat.com/security/cve/CVE-2024-46956
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-46956
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-46956
• article
  https://bugs.ghostscript.com/show_bug.cgi?id=707895
• article
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f4151f12db32cd3ed26c24327de714bf2c3ed6ca