Lucene search

K
redhatRedHatRHSA-2023:5459
HistoryOct 05, 2023 - 10:11 a.m.

(RHSA-2023:5459) Important: ghostscript security update

2023-10-0510:11:33
access.redhat.com
14
ghostscript
security update
os command injection

0.001 Low

EPSS

Percentile

22.1%

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

  • ghostscript: vulnerable to OS command injection due to mishandles permission validation for pipe devices (CVE-2023-36664)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.