A flaw was found in ghostscript. The fix for CVE-2020-16305 in ghostscript was not included in RHSA-2021:1852-06 advisory as it was claimed to be. This issue only affects the ghostscript package as shipped with Red Hat Enterprise Linux 8.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libgsUpgrade ghostscript-tools-fontsUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-tools-printingUpgrade ghostscript-x11Upgrade ghostscript-docUpgrade libgs-develUpgrade ghostscript | Nov 28, 2023 | Aug 23, 2023 |
| Centos_linux | — | Upgrade ghostscript-x11Upgrade ghostscript-debugsourceUpgrade ghostscript-debuginfoUpgrade ghostscriptUpgrade libgs-debuginfoUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-x11-debuginfoUpgrade libgs | Nov 15, 2023 | Aug 23, 2023 |
| Ghostscript | — | Upgrade to Ghostscript version 9.51 | Jan 24, 2024 | Aug 23, 2023 |
| Oracle_linux | — | Upgrade ghostscriptUpgrade ghostscript-x11Upgrade libgsUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-docUpgrade libgs-develUpgrade ghostscript-tools-printingUpgrade ghostscript-tools-fonts | Nov 23, 2023 | Aug 23, 2023 |
| Redhat_linux | — | Upgrade ghostscript-gtk-debuginfoUpgrade ghostscript-tools-printingUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-debuginfoUpgrade ghostscript-tools-fontsUpgrade ghostscript-debugsourceNo solution existsUpgrade libgsUpgrade ghostscriptUpgrade libgs-debuginfoUpgrade ghostscript-tools-dvipdfUpgrade libgs-develUpgrade ghostscript-x11Upgrade ghostscript-doc | Nov 15, 2023 | Aug 23, 2023 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub