[CLSA-2026:1792078022] ghostscript: Fix of 6 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-15 15:27:17 UTC
Description:
- CVE-2023-28879: fix buffer overrun in (T)BCP encoding - CVE-2023-38559: fix out-of-bounds read in devn_pcx_write_rle - CVE-2023-46751: fix dangling file pointer in gdev_prn_open_printer_seekable - CVE-2024-46951: check the type of the Pattern Implementation - CVE-2024-46953: check for overflow validating output file name format string - CVE-2024-46956: fix buffer length check in file enumeration
Updated packages:
  • ghostscript-9.25-5.0.1.el7.tuxcare.els2.i686.rpm
    sha:e233c0efcd87ab99f4b6038857d4d5fec76de2ff2441979561c1f74388d8f400
  • ghostscript-9.25-5.0.1.el7.tuxcare.els2.x86_64.rpm
    sha:3d216a0fa89926ca5522bc78876e4ec69127eee16d994c8513e0f916900f925c
  • ghostscript-cups-9.25-5.0.1.el7.tuxcare.els2.i686.rpm
    sha:09dfda203d5bbafc7035c80b7f5701839dca83e3cce00c58e46a82bb22b07c67
  • ghostscript-cups-9.25-5.0.1.el7.tuxcare.els2.x86_64.rpm
    sha:e4cd61ae3415840f083629827234095114f7f2c2f10bf4cda466fe355d07f97d
  • ghostscript-doc-9.25-5.0.1.el7.tuxcare.els2.noarch.rpm
    sha:11363f5cb61d659e86c6cbc7be78067f89da99bfae78081ac2ace23fbc8a4714
  • ghostscript-gtk-9.25-5.0.1.el7.tuxcare.els2.i686.rpm
    sha:b2677aa6bb380df8e2cd939a0760c59f8e28714c1089709e57bbcca51e89c796
  • ghostscript-gtk-9.25-5.0.1.el7.tuxcare.els2.x86_64.rpm
    sha:56d88b93742f4627cea856f007e4c1a3b2bb69a544670b65bd5f33cadac8dad8
  • libgs-9.25-5.0.1.el7.tuxcare.els2.i686.rpm
    sha:ef048f4a309319452afa5d0b03b8c9970838a8b4bba31a32b49d76362841c30b
  • libgs-9.25-5.0.1.el7.tuxcare.els2.x86_64.rpm
    sha:2e815dc9735468a39fd29065071fe3c1dbf63b2eab4840a017a6520664346714
  • libgs-devel-9.25-5.0.1.el7.tuxcare.els2.i686.rpm
    sha:c6b7db7dc53a0f8b9baec633365169a1af10df9493208d4f18b43c731c7aba5a
  • libgs-devel-9.25-5.0.1.el7.tuxcare.els2.x86_64.rpm
    sha:f983fc162e6aea72a5af4dd67a22403c758b5de2e15f63798ceb62d98af1e1d6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.