[CLSA-2026:1792077881] ghostscript: Fix of 6 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-15 15:24:56 UTC
Description:
- CVE-2023-28879: fix buffer overrun in (T)BCP encoding - CVE-2023-38559: fix out-of-bounds read in devn_pcx_write_rle - CVE-2023-46751: fix dangling file pointer in gdev_prn_open_printer_seekable - CVE-2024-46951: check the type of the Pattern Implementation - CVE-2024-46953: check for overflow validating output file name format string - CVE-2024-46956: fix buffer length check in file enumeration
Updated packages:
  • ghostscript-9.25-5.0.1.el7.tuxcare.els2.i686.rpm
    sha:ed55404fce0d52cb7aa7365d889e300ac49ff3dfbbf3d85c32c619b5d0ccddf3
  • ghostscript-9.25-5.0.1.el7.tuxcare.els2.x86_64.rpm
    sha:76bb2a8e854e9fd8b1a1163611c89012627a8bc2fd46950d4795d796adaa5678
  • ghostscript-cups-9.25-5.0.1.el7.tuxcare.els2.i686.rpm
    sha:15bd1eaf95a9920dca1a2909cb1764e539ddcae454bf49356b6af5989c62bb04
  • ghostscript-cups-9.25-5.0.1.el7.tuxcare.els2.x86_64.rpm
    sha:3caf6506890987b17bcf5137035ae3d0186890f79598338af8e826b8773a97f5
  • ghostscript-doc-9.25-5.0.1.el7.tuxcare.els2.noarch.rpm
    sha:12a1c9b0d1291510d40137f67f607a9c3c272f875e7166d591f11516425ef99f
  • ghostscript-gtk-9.25-5.0.1.el7.tuxcare.els2.i686.rpm
    sha:dbf75bc0bc5fc04e244caeb39a10db69d399c010d6a29eafc29468bef0c5d6b7
  • ghostscript-gtk-9.25-5.0.1.el7.tuxcare.els2.x86_64.rpm
    sha:69f6ac021ec1508250222ab201d8f3c67c1dcaf35c9533a2a9f76360e648a6f0
  • libgs-9.25-5.0.1.el7.tuxcare.els2.i686.rpm
    sha:e496e75879170f4a2d2f1af60aabc04d970a96d640a59e64aff8bc56dd698b3e
  • libgs-9.25-5.0.1.el7.tuxcare.els2.x86_64.rpm
    sha:75a1d361112374f8a1368f93bf397d2e14d0cd08e1ba62b795be6dd31c0323be
  • libgs-devel-9.25-5.0.1.el7.tuxcare.els2.i686.rpm
    sha:65783d2f3448454ce449b645f3fd8b0cd245e047042a53af7c70d277a6ba7e83
  • libgs-devel-9.25-5.0.1.el7.tuxcare.els2.x86_64.rpm
    sha:972965ea9977988206f95e6e0ded000ad55747e6251a49f5d47f6c0aa4080a07
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.