Important: ghostscript security update

2023-10-0500:00:00

errata.almalinux.org

ghostscript

security update

os command injection

cve-2023-36664

unix

pdf

postscript

0.001 Low

EPSS

Percentile

22.1%

JSON

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

ghostscript: vulnerable to OS command injection due to mishandles permission validation for pipe devices (CVE-2023-36664)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux9noarchghostscript-doc< 9.54.0-10.el9_2ghostscript-doc-9.54.0-10.el9_2.noarch.rpm
almalinux9i686libgs< 9.54.0-10.el9_2libgs-9.54.0-10.el9_2.i686.rpm
almalinux9ppc64leghostscript< 9.54.0-10.el9_2ghostscript-9.54.0-10.el9_2.ppc64le.rpm
almalinux9ppc64lelibgs< 9.54.0-10.el9_2libgs-9.54.0-10.el9_2.ppc64le.rpm
almalinux9ppc64leghostscript-x11< 9.54.0-10.el9_2ghostscript-x11-9.54.0-10.el9_2.ppc64le.rpm
almalinux9ppc64leghostscript-tools-dvipdf< 9.54.0-10.el9_2ghostscript-tools-dvipdf-9.54.0-10.el9_2.ppc64le.rpm
almalinux9ppc64leghostscript-tools-fonts< 9.54.0-10.el9_2ghostscript-tools-fonts-9.54.0-10.el9_2.ppc64le.rpm
almalinux9ppc64leghostscript-tools-printing< 9.54.0-10.el9_2ghostscript-tools-printing-9.54.0-10.el9_2.ppc64le.rpm
almalinux9aarch64ghostscript-tools-printing< 9.54.0-10.el9_2ghostscript-tools-printing-9.54.0-10.el9_2.aarch64.rpm
almalinux9aarch64ghostscript-x11< 9.54.0-10.el9_2ghostscript-x11-9.54.0-10.el9_2.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	9	noarch	ghostscript-doc	< 9.54.0-10.el9_2	ghostscript-doc-9.54.0-10.el9_2.noarch.rpm
almalinux	9	i686	libgs	< 9.54.0-10.el9_2	libgs-9.54.0-10.el9_2.i686.rpm
almalinux	9	ppc64le	ghostscript	< 9.54.0-10.el9_2	ghostscript-9.54.0-10.el9_2.ppc64le.rpm
almalinux	9	ppc64le	libgs	< 9.54.0-10.el9_2	libgs-9.54.0-10.el9_2.ppc64le.rpm
almalinux	9	ppc64le	ghostscript-x11	< 9.54.0-10.el9_2	ghostscript-x11-9.54.0-10.el9_2.ppc64le.rpm
almalinux	9	ppc64le	ghostscript-tools-dvipdf	< 9.54.0-10.el9_2	ghostscript-tools-dvipdf-9.54.0-10.el9_2.ppc64le.rpm
almalinux	9	ppc64le	ghostscript-tools-fonts	< 9.54.0-10.el9_2	ghostscript-tools-fonts-9.54.0-10.el9_2.ppc64le.rpm
almalinux	9	ppc64le	ghostscript-tools-printing	< 9.54.0-10.el9_2	ghostscript-tools-printing-9.54.0-10.el9_2.ppc64le.rpm
almalinux	9	aarch64	ghostscript-tools-printing	< 9.54.0-10.el9_2	ghostscript-tools-printing-9.54.0-10.el9_2.aarch64.rpm
almalinux	9	aarch64	ghostscript-x11	< 9.54.0-10.el9_2	ghostscript-x11-9.54.0-10.el9_2.aarch64.rpm