ALSA-2023:6544
ALSA-2023:6544 · Moderate: ghostscript security and bug fix update
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: buffer overflow in base/sbcp.c leading to data corruption (CVE-2023-28879) * ghostscript: Out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in DoS (CVE-2023-38559) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
ghostscript AlmaLinux:9
- Plages de versions concernées
- ECOSYSTEM: < 9.54.0-13.el9
Mettez à jour vers 9.54.0-13.el9
ghostscript-doc AlmaLinux:9
- Plages de versions concernées
- ECOSYSTEM: < 9.54.0-13.el9
Mettez à jour vers 9.54.0-13.el9
ghostscript-tools-dvipdf AlmaLinux:9
- Plages de versions concernées
- ECOSYSTEM: < 9.54.0-13.el9
Mettez à jour vers 9.54.0-13.el9
ghostscript-tools-fonts AlmaLinux:9
- Plages de versions concernées
- ECOSYSTEM: < 9.54.0-13.el9
Mettez à jour vers 9.54.0-13.el9
ghostscript-tools-printing AlmaLinux:9
- Plages de versions concernées
- ECOSYSTEM: < 9.54.0-13.el9
Mettez à jour vers 9.54.0-13.el9
ghostscript-x11 AlmaLinux:9
- Plages de versions concernées
- ECOSYSTEM: < 9.54.0-13.el9
Mettez à jour vers 9.54.0-13.el9
libgs AlmaLinux:9
- Plages de versions concernées
- ECOSYSTEM: < 9.54.0-13.el9
Mettez à jour vers 9.54.0-13.el9
libgs-devel AlmaLinux:9
- Plages de versions concernées
- ECOSYSTEM: < 9.54.0-13.el9
Mettez à jour vers 9.54.0-13.el9
Sources originales
- https://access.redhat.com/errata/RHSA-2023:6544
- https://access.redhat.com/security/cve/CVE-2023-28879
- https://access.redhat.com/security/cve/CVE-2023-38559
- https://bugzilla.redhat.com/2184585
- https://bugzilla.redhat.com/2224367
- https://errata.almalinux.org/9/ALSA-2023-6544.html
- https://osv.dev/vulnerability/ALSA-2023:6544