[CLSA-2026:1792076636] ghostscript: Fix of 6 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-17 12:08:20 UTC
Description:
- CVE-2023-28879: fix buffer overrun in (T)BCP encoding - CVE-2023-38559: fix out-of-bounds read in devn_pcx_write_rle - CVE-2023-46751: fix dangling file pointer in gdev_prn_open_printer_seekable - CVE-2024-46951: check the type of the Pattern Implementation - CVE-2024-46953: check for overflow validating output file name format string - CVE-2024-46956: fix buffer length check in file enumeration
Updated packages:
  • ghostscript-9.25-5.0.1.el7.tuxcare.els2.i686.rpm
    sha:0143006d5e74102f4f3c0f1b1cc3a09bbd6197f510816f54924074ffdf8b9002
  • ghostscript-9.25-5.0.1.el7.tuxcare.els2.x86_64.rpm
    sha:0b91344977120a8c0a91393b2378c63ddbef543a81d867359efeafb2e99bd738
  • ghostscript-cups-9.25-5.0.1.el7.tuxcare.els2.i686.rpm
    sha:2b3306e88cd056fe031b3b5abe2cd80d5c607d9d3d14716b5b6b588d23e43c6a
  • ghostscript-cups-9.25-5.0.1.el7.tuxcare.els2.x86_64.rpm
    sha:302043f2ccf3d79378c39083335c7e31102d4df58ea41b1a58a3de3f4a1038fc
  • ghostscript-doc-9.25-5.0.1.el7.tuxcare.els2.noarch.rpm
    sha:5f2279503a928dda18a07b0c052993063e8ddf86d2396f93c6f1e84b5d9c74a8
  • ghostscript-gtk-9.25-5.0.1.el7.tuxcare.els2.i686.rpm
    sha:aab173ca12e3a32c8df5b19431d0f23c834d87470750956afdb518b1701b3158
  • ghostscript-gtk-9.25-5.0.1.el7.tuxcare.els2.x86_64.rpm
    sha:9930a9361a1b371c09489b674e4128c0ebbb713376ba9d51df0968cd971f30af
  • libgs-9.25-5.0.1.el7.tuxcare.els2.i686.rpm
    sha:0208cca260a577f2e0cc2d531c27e59fd591b239f37e5191a8fe9b9fe66e3443
  • libgs-9.25-5.0.1.el7.tuxcare.els2.x86_64.rpm
    sha:cdd3c9e1cd762f10357c592c0d8ff74a679774eee4c2b410ae0a270cd37e5037
  • libgs-devel-9.25-5.0.1.el7.tuxcare.els2.i686.rpm
    sha:9c12727a6324af0c3c5e20ed856db25796ea41a63749d2ecf73be4ab1703b85f
  • libgs-devel-9.25-5.0.1.el7.tuxcare.els2.x86_64.rpm
    sha:457c24ecc53e7ca10807ca652d9fbbb600d4148a69cae8d85ba1ae738925220b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.