ALSA-2025:4362

Dashboard / Vulnerabilities / ALSA-2025:4362

ALSA-2025:4362

Summary: Moderate: ghostscript security update

Details: The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: heap buffer over write vulnerability in GhostScript's lp8000_print_page() in gdevlp8k.c (CVE-2020-27792) * ghostscript: dangling pointer in gdev_prn_open_printer_seekable() (CVE-2023-46751) * ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling (CVE-2024-46952) * ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space (CVE-2024-46951) * ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding (CVE-2024-46954) * ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript (CVE-2024-46953) * ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution (CVE-2024-46956) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References: https://access.redhat.com/errata/RHSA-2025:4362, https://access.redhat.com/security/cve/CVE-2020-27792, https://access.redhat.com/security/cve/CVE-2023-46751, https://access.redhat.com/security/cve/CVE-2024-46951, https://access.redhat.com/security/cve/CVE-2024-46952, https://access.redhat.com/security/cve/CVE-2024-46953, https://access.redhat.com/security/cve/CVE-2024-46954, https://access.redhat.com/security/cve/CVE-2024-46956, https://bugzilla.redhat.com/2247179, https://bugzilla.redhat.com/2253365, https://bugzilla.redhat.com/2325041, https://bugzilla.redhat.com/2325043, https://bugzilla.redhat.com/2325044, https://bugzilla.redhat.com/2325045, https://bugzilla.redhat.com/2325047, https://errata.almalinux.org/8/ALSA-2025-4362.html