Lucene search

K
mageiaGentoo FoundationMGASA-2023-0134
HistoryApr 11, 2023 - 10:02 p.m.

Updated ghostscript packages fix security vulnerability

2023-04-1122:02:20
Gentoo Foundation
advisories.mageia.org
35

0.003 Low

EPSS

Percentile

70.4%

In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled to one byte less than full, and one then tries to write an escaped character, two bytes are written. (CVE-2023-28879)

OSVersionArchitecturePackageVersionFilename
Mageia8noarchghostscript< 9.53.3-2.4ghostscript-9.53.3-2.4.mga8