[ALSA-2024:6197] Moderate: ghostscript security update
Type:
security
Severity:
moderate
Release date:
2024-09-04
Description:
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: format string injection leads to shell command execution (SAFER bypass) (CVE-2024-29510) * ghostscript: path traversal and command execution due to path reduction (CVE-2024-33869) * ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths (CVE-2024-33870) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 libgs-9.54.0-17.el9_4.aarch64.rpm 27ac3def2c94cf34c3367aa02941667789b25dd18ed404f26392e35d2ad3ef39
aarch64 ghostscript-tools-dvipdf-9.54.0-17.el9_4.aarch64.rpm 2d4a715fd2558a8d2dabd9e9d8e57f50ab871b5a1e4644cf5be0b351f9bbbd86
aarch64 libgs-devel-9.54.0-17.el9_4.aarch64.rpm 706dc43209e1913976e6b9142b078215b6ae4d6f113e1d254f2b403aed41eff5
aarch64 ghostscript-x11-9.54.0-17.el9_4.aarch64.rpm 766cefe39b7c6fdbe977bbb6d4e6ef60cd9352f7df7f65e102276f3a5b527bd5
aarch64 ghostscript-tools-printing-9.54.0-17.el9_4.aarch64.rpm 80128d28e67af63d8fca9a6626bf951af66b89c29a893e17bfd7bdd9622dccc6
aarch64 ghostscript-tools-fonts-9.54.0-17.el9_4.aarch64.rpm 9a41e610ca814623109e5109a88dcaad6f2d3c507e0d4011a2614bd0535bef8d
aarch64 ghostscript-9.54.0-17.el9_4.aarch64.rpm 9e055ce027c0e095e6c8bc28b649587830654d2b7103cb47b198d2fecb04c2fc
i686 ghostscript-tools-printing-9.54.0-17.el9_4.i686.rpm 56a222baf900e70d913093b0424c4e077be259c98bcbe6bde42506b453a4b292
i686 libgs-devel-9.54.0-17.el9_4.i686.rpm 9684b7cf907e2d59952a310e0ab41f4be5bba08d604a2412a17b12612da8240e
i686 libgs-9.54.0-17.el9_4.i686.rpm a898a6461cec55a8a2b519b14385265d0ebfb31dc6aaf6953c61e3777119b081
i686 ghostscript-tools-fonts-9.54.0-17.el9_4.i686.rpm e2b72e50c3c614c95390f7fa2d8114351afd39b610b73faddfd2654cfb66ec7d
i686 ghostscript-9.54.0-17.el9_4.i686.rpm f052e075990e4621dbd763f5f4566b03c255d6a606fe98b134185d29aeac2bce
noarch ghostscript-doc-9.54.0-17.el9_4.noarch.rpm 876f49c2bf4783256e97669baae56fdab8ac9e9e87b009224182323e48476af4
ppc64le libgs-devel-9.54.0-17.el9_4.ppc64le.rpm 4ac109a010e6f8dc3a5ced1803485401b800bb506fca9fc90271635555e5e909
ppc64le ghostscript-tools-dvipdf-9.54.0-17.el9_4.ppc64le.rpm 521e7991a41f3caf0570c47fcb1bc650b87bd8e5572d32e3c678a23c102a4b82
ppc64le ghostscript-tools-fonts-9.54.0-17.el9_4.ppc64le.rpm 60a3378cddbab9b08dba4a6f51efcd5b5efffca637884b7cfe4b69162152fda6
ppc64le libgs-9.54.0-17.el9_4.ppc64le.rpm 613da5a82f76723a29932e82f70ce92edbf44fd118ccb60ef4fa1d784773e821
ppc64le ghostscript-tools-printing-9.54.0-17.el9_4.ppc64le.rpm 8f965f021ef147abf8f490caa0ac7615ecb13a811d20bb3ff3b33532a850d9cb
ppc64le ghostscript-9.54.0-17.el9_4.ppc64le.rpm b3dcedbb2ab020f1d77bab694b002e89ec735f0e84c8809ec8d640b402639c9c
ppc64le ghostscript-x11-9.54.0-17.el9_4.ppc64le.rpm ec552e5ec0e1260394d40ac3d12c834bca86a60187401a134b42e9ff186b1687
s390x ghostscript-9.54.0-17.el9_4.s390x.rpm 2ce44cc9c030c1dfb0ba6ae77c7ebd11406786b905049d66e86543a252c0e8cc
s390x ghostscript-tools-fonts-9.54.0-17.el9_4.s390x.rpm 2ec60ec5861f58494f3fe8c5539b636918c5ae725ffbba8638612e02c3e80356
s390x ghostscript-x11-9.54.0-17.el9_4.s390x.rpm 624e69fe26ba034e9bcda18b655ad6c2337b2b2b6f94c16c1d1e7f6a2153db13
s390x libgs-9.54.0-17.el9_4.s390x.rpm 73ecf3a0c6d276c368f29892ed1ffedae4a35c08c62ad36587eaa02ff45a2a9b
s390x ghostscript-tools-printing-9.54.0-17.el9_4.s390x.rpm 750f0293fccb14dfa85b9e63d531a2bb2c261ca2a1c31743a9d617f3f4ae2e86
s390x libgs-devel-9.54.0-17.el9_4.s390x.rpm 868b43f8b1538f7083293f336d20695baacd49810e79cd41983170beb8ff1610
s390x ghostscript-tools-dvipdf-9.54.0-17.el9_4.s390x.rpm 87a3b365280eeafcf87a8dda56868f91e3b6ddb8af0f378c952cf20e9587700f
x86_64 libgs-devel-9.54.0-17.el9_4.x86_64.rpm 0026d59c82bdc30a92d6fae83f8b40d13b60ccee890ba5610e60873d7d6901a0
x86_64 ghostscript-tools-printing-9.54.0-17.el9_4.x86_64.rpm 0e0b8d20f0108331dbb4c855abef89436e35ddd9b3257899d2c5a5beb413d733
x86_64 ghostscript-tools-fonts-9.54.0-17.el9_4.x86_64.rpm 3ffc7a94f2cc0ba461d766199043781f952315d2d268534cc448016ff90368a2
x86_64 libgs-9.54.0-17.el9_4.x86_64.rpm 52a84adbee4192939cfeba4534a8827dd319638dff50dd133dfb7822748f4d18
x86_64 ghostscript-9.54.0-17.el9_4.x86_64.rpm 679ad92c20421188bd71bf8ec48a0eafe0ef11b0f2c6dbc7d692475c042f5a4d
x86_64 ghostscript-x11-9.54.0-17.el9_4.x86_64.rpm 941d1052885a9e99f801f20372e7ad3109c5f5f94d9a5e8633d0db81ae416262
x86_64 ghostscript-tools-dvipdf-9.54.0-17.el9_4.x86_64.rpm a274616197bf84dd246f838fc19b7fac97f7c2c3a6e93796eba9874d317e7022
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.