Important: Ghostscript Security Update
Summary
ALSA-2023:6732: Important: ghostscript security update. Affects ghostscript versions < 9.54.0-14.el9_3. Fixed in 9.54.0-14.el9_3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Ghostscript is a suite of utilities used for rendering PostScript and PDF documents. It translates PostScript code into common bitmap formats for display or printing purposes. The vulnerability affects the Ghostscript suite, specifically the GhostPDL component.
Vulnerability Detail
The vulnerability in Ghostscript's GhostPDL component can lead to remote code execution through crafted PostScript documents. This can have severe consequences, allowing attackers to execute arbitrary code on the affected system.
How To Fix
Minimum fixed version
9.54.0-14.el9_3
This is the first release that contains the fix.
sudo dnf update ghostscriptTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to apply the security update as soon as possible to protect the system from potential exploitation.
Conclusion
It is important to promptly update the Ghostscript package to address this vulnerability. Failure to do so may expose the system to potential remote code execution attacks. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for ghostscript →
FAQ
Ghostscript is a suite of utilities used for rendering PostScript and PDF documents. It translates PostScript code into common bitmap formats for display or printing purposes.
The vulnerability in Ghostscript's GhostPDL component can lead to remote code execution through crafted PostScript documents. This can allow attackers to execute arbitrary code on the affected system.
To fix this vulnerability, update the Ghostscript package to version 9.54.0-14.el9_3 or later. This update includes the necessary security patches to mitigate the vulnerability.
There is no known workaround for this vulnerability. It is crucial to apply the security update as soon as possible to protect the system from potential exploitation.
You can find more information about this vulnerability, including the CVE identifier, on the CVE page listed in the References section of the advisory.
Related vulnerabilities
Recent vulnerabilities recorded for ghostscript.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
