Lucene search

K
almalinuxAlmaLinuxALSA-2023:7053
HistoryNov 14, 2023 - 12:00 a.m.

Moderate: ghostscript security and bug fix update

2023-11-1400:00:00
errata.almalinux.org
11
ghostscript
pdf
postscript
buffer overflow
out-of-bound read
data corruption
denial of service
cve
almalinux
unix

7.9 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.0%

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

  • ghostscript: buffer overflow in base/sbcp.c leading to data corruption (CVE-2023-28879)
  • ghostscript: Out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in DoS (CVE-2023-38559)
  • ghostscript: Incomplete fix for CVE-2020-16305 (CVE-2023-4042)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.