Moderate: ghostscript security and bug fix update

2023-11-0700:00:00

errata.almalinux.org

ghostscript

security

bug fix

update

postscript

pdf

buffer overflow

out-of-bound read

cve

data corruption

dos

bitmap formats

unix

7.9 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.4%

JSON

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

ghostscript: buffer overflow in base/sbcp.c leading to data corruption (CVE-2023-28879)
ghostscript: Out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in DoS (CVE-2023-38559)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
almalinux9noarchghostscript-doc< 9.54.0-13.el9ghostscript-doc-9.54.0-13.el9.noarch.rpm
almalinux9i686libgs< 9.54.0-13.el9libgs-9.54.0-13.el9.i686.rpm
almalinux9ppc64lelibgs< 9.54.0-13.el9libgs-9.54.0-13.el9.ppc64le.rpm
almalinux9ppc64leghostscript< 9.54.0-13.el9ghostscript-9.54.0-13.el9.ppc64le.rpm
almalinux9ppc64leghostscript-tools-fonts< 9.54.0-13.el9ghostscript-tools-fonts-9.54.0-13.el9.ppc64le.rpm
almalinux9ppc64leghostscript-tools-dvipdf< 9.54.0-13.el9ghostscript-tools-dvipdf-9.54.0-13.el9.ppc64le.rpm
almalinux9ppc64leghostscript-tools-printing< 9.54.0-13.el9ghostscript-tools-printing-9.54.0-13.el9.ppc64le.rpm
almalinux9ppc64leghostscript-x11< 9.54.0-13.el9ghostscript-x11-9.54.0-13.el9.ppc64le.rpm
almalinux9aarch64ghostscript-tools-dvipdf< 9.54.0-13.el9ghostscript-tools-dvipdf-9.54.0-13.el9.aarch64.rpm
almalinux9aarch64ghostscript-x11< 9.54.0-13.el9ghostscript-x11-9.54.0-13.el9.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	9	noarch	ghostscript-doc	< 9.54.0-13.el9	ghostscript-doc-9.54.0-13.el9.noarch.rpm
almalinux	9	i686	libgs	< 9.54.0-13.el9	libgs-9.54.0-13.el9.i686.rpm
almalinux	9	ppc64le	libgs	< 9.54.0-13.el9	libgs-9.54.0-13.el9.ppc64le.rpm
almalinux	9	ppc64le	ghostscript	< 9.54.0-13.el9	ghostscript-9.54.0-13.el9.ppc64le.rpm
almalinux	9	ppc64le	ghostscript-tools-fonts	< 9.54.0-13.el9	ghostscript-tools-fonts-9.54.0-13.el9.ppc64le.rpm
almalinux	9	ppc64le	ghostscript-tools-dvipdf	< 9.54.0-13.el9	ghostscript-tools-dvipdf-9.54.0-13.el9.ppc64le.rpm
almalinux	9	ppc64le	ghostscript-tools-printing	< 9.54.0-13.el9	ghostscript-tools-printing-9.54.0-13.el9.ppc64le.rpm
almalinux	9	ppc64le	ghostscript-x11	< 9.54.0-13.el9	ghostscript-x11-9.54.0-13.el9.ppc64le.rpm
almalinux	9	aarch64	ghostscript-tools-dvipdf	< 9.54.0-13.el9	ghostscript-tools-dvipdf-9.54.0-13.el9.aarch64.rpm
almalinux	9	aarch64	ghostscript-x11	< 9.54.0-13.el9	ghostscript-x11-9.54.0-13.el9.aarch64.rpm