Important: ghostscript security update

2023-11-0200:00:00

errata.almalinux.org

ghostscript

security update

remote code execution

postscript

documents

cve-2023-43115

unix

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.8%

JSON

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

Ghostscript: GhostPDL can lead to remote code execution via crafted PostScript documents (CVE-2023-43115)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux9i686libgs< 9.54.0-11.el9_2libgs-9.54.0-11.el9_2.i686.rpm
almalinux9noarchghostscript-doc< 9.54.0-11.el9_2ghostscript-doc-9.54.0-11.el9_2.noarch.rpm
almalinux9ppc64leghostscript-tools-fonts< 9.54.0-11.el9_2ghostscript-tools-fonts-9.54.0-11.el9_2.ppc64le.rpm
almalinux9ppc64leghostscript-x11< 9.54.0-11.el9_2ghostscript-x11-9.54.0-11.el9_2.ppc64le.rpm
almalinux9ppc64leghostscript< 9.54.0-11.el9_2ghostscript-9.54.0-11.el9_2.ppc64le.rpm
almalinux9ppc64leghostscript-tools-dvipdf< 9.54.0-11.el9_2ghostscript-tools-dvipdf-9.54.0-11.el9_2.ppc64le.rpm
almalinux9ppc64lelibgs< 9.54.0-11.el9_2libgs-9.54.0-11.el9_2.ppc64le.rpm
almalinux9ppc64leghostscript-tools-printing< 9.54.0-11.el9_2ghostscript-tools-printing-9.54.0-11.el9_2.ppc64le.rpm
almalinux9x86_64libgs< 9.54.0-11.el9_2libgs-9.54.0-11.el9_2.x86_64.rpm
almalinux9x86_64ghostscript-tools-fonts< 9.54.0-11.el9_2ghostscript-tools-fonts-9.54.0-11.el9_2.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	9	i686	libgs	< 9.54.0-11.el9_2	libgs-9.54.0-11.el9_2.i686.rpm
almalinux	9	noarch	ghostscript-doc	< 9.54.0-11.el9_2	ghostscript-doc-9.54.0-11.el9_2.noarch.rpm
almalinux	9	ppc64le	ghostscript-tools-fonts	< 9.54.0-11.el9_2	ghostscript-tools-fonts-9.54.0-11.el9_2.ppc64le.rpm
almalinux	9	ppc64le	ghostscript-x11	< 9.54.0-11.el9_2	ghostscript-x11-9.54.0-11.el9_2.ppc64le.rpm
almalinux	9	ppc64le	ghostscript	< 9.54.0-11.el9_2	ghostscript-9.54.0-11.el9_2.ppc64le.rpm
almalinux	9	ppc64le	ghostscript-tools-dvipdf	< 9.54.0-11.el9_2	ghostscript-tools-dvipdf-9.54.0-11.el9_2.ppc64le.rpm
almalinux	9	ppc64le	libgs	< 9.54.0-11.el9_2	libgs-9.54.0-11.el9_2.ppc64le.rpm
almalinux	9	ppc64le	ghostscript-tools-printing	< 9.54.0-11.el9_2	ghostscript-tools-printing-9.54.0-11.el9_2.ppc64le.rpm
almalinux	9	x86_64	libgs	< 9.54.0-11.el9_2	libgs-9.54.0-11.el9_2.x86_64.rpm
almalinux	9	x86_64	ghostscript-tools-fonts	< 9.54.0-11.el9_2	ghostscript-tools-fonts-9.54.0-11.el9_2.x86_64.rpm