ghostscript-9.54.0-13.el9
エラータID: AXSA:2023-6907:05
リリース日:
2023/12/12 Tuesday - 10:28
題名:
ghostscript-9.54.0-13.el9
影響のあるチャネル:
MIRACLE LINUX 9 for x86_64
Severity:
Moderate
Description:
以下項目について対処しました。
[Security Fix]
- Ghostscript には、メモリ領域の範囲外書き込みの問題があるため、
リモートの攻撃者により、特定の条件下でエスケープ文字の書き込み
を介して、PostScript インタプリタ内部のデータ破壊を可能とする
脆弱性が存在します。(CVE-2023-28879)
- Ghostscript の base/gdevdevn.c の devn_pcx_write_rle() 関数には、
バッファオーバーフローの問題があるため、ローカルの攻撃者に
より、DEVN デバイス用の細工された PDF ファイルの出力を介して、
サービス拒否攻撃を可能とする脆弱性が存在します。
(CVE-2023-38559)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2023-28879
In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled to one byte less than full, and one then tries to write an escaped character, two bytes are written.
In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled to one byte less than full, and one then tries to write an escaped character, two bytes are written.
CVE-2023-38559
A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs.
A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs.
追加情報:
N/A
ダウンロード:
SRPMS
- ghostscript-9.54.0-13.el9.src.rpm
MD5: f5f09648fca35423e1d56f385d89aa58
SHA-256: 46d1394fbaf26b47504ab125698cd6b4b063bac094f3dfe79edb6a88dbc330bf
Size: 53.46 MB
Asianux Server 9 for x86_64
- ghostscript-9.54.0-13.el9.i686.rpm
MD5: f7cce6824c20b6b2f026ffe0d3551eef
SHA-256: 84f35bfd1d6a12151973eff407eef36238423ccce884726f8419fb80074083c1
Size: 36.24 kB - ghostscript-9.54.0-13.el9.x86_64.rpm
MD5: c5b37f35a0b24d8c49d3febec5353c60
SHA-256: df1edbe2071e1e88d065269d82fa412437f422f1b59242fa4a05bb5aa8b59bab
Size: 36.05 kB - ghostscript-doc-9.54.0-13.el9.noarch.rpm
MD5: ebec1a54dd1b735c2288a3ae8137225e
SHA-256: 87e07df391fe0eb9f22cbca4ac77d91c5eafd597f2bae8cf4d6c9ed44e27b838
Size: 7.77 MB - ghostscript-tools-dvipdf-9.54.0-13.el9.x86_64.rpm
MD5: c62ac5165d94dfe709817ffea76968c0
SHA-256: cb01253a060aae31a8354e8e06503acf8face3ad21912371057776363e21a6d5
Size: 10.41 kB - ghostscript-tools-fonts-9.54.0-13.el9.i686.rpm
MD5: b91257f60cbcf17e9770f40d038073ad
SHA-256: 99bafc0e48ceb09996f7013af58e3ccb93de1f5232b2a65ff97847f6e03bf859
Size: 11.41 kB - ghostscript-tools-fonts-9.54.0-13.el9.x86_64.rpm
MD5: 3e0d8c9de0e0869b64873cb088e16c74
SHA-256: 1b6305cbb1cb79f9789e38ffaf762802087800ae32abe80a5ff5cfa1041aa7b0
Size: 11.39 kB - ghostscript-tools-printing-9.54.0-13.el9.i686.rpm
MD5: 0ee6cbdbc7a19826756c9bdfb2b1fdb8
SHA-256: 9dfb60904df763c42e85b30177dc99f05191edd15db04b5e500ce0e7e1d44c86
Size: 11.38 kB - ghostscript-tools-printing-9.54.0-13.el9.x86_64.rpm
MD5: 68824c879c9e267ace5842628fe58ca0
SHA-256: 29831de708c11a3dc264215333932f4dfd5f70e8fdfa4154fad622db15d55785
Size: 11.36 kB - ghostscript-x11-9.54.0-13.el9.x86_64.rpm
MD5: da91b9a91f430f29362edcea80176053
SHA-256: e53c082adb20ffe5fab11ab712c7687971dbc94f13c0c64f4abcf23df677a16b
Size: 37.50 kB - libgs-9.54.0-13.el9.i686.rpm
MD5: c4ed0315a3eb19020197ab4b0db5cd35
SHA-256: 8f7e072781884b2689d2c0bb4117401a36257f35615fdd91551318dbf68abd2d
Size: 3.26 MB - libgs-9.54.0-13.el9.x86_64.rpm
MD5: 393de616162faa2bc0530bc726e7f225
SHA-256: 9a1d5a815f44e69dc03ac8d10c0aea0ca8599a2799508177f4fe79f2ac9e299c
Size: 3.12 MB - libgs-devel-9.54.0-13.el9.i686.rpm
MD5: a4b724e71c900895867d426a0e4e21c9
SHA-256: 38fd3dbe532a84ddb1b910e9be414caa2ff9d8bfb4870142ced977eb9e713b89
Size: 20.57 kB - libgs-devel-9.54.0-13.el9.x86_64.rpm
MD5: 0db84b216835c7e39248dc701269f3e1
SHA-256: 2814b79eeef05982512846f9b5a713c21d93392b6b6caf5a6a3a150fc3e45592
Size: 20.56 kB