[SECURITY] [DLA 3381-1] ghostscript security update

2023-04-0419:00:36

lists.debian.org

version 9.27~dfsg-2+deb10u7

pdf

vulnerability

buffer-overflow

debian

lts

fixed

ghostscript

security update

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.9%

JSON

Debian LTS Advisory DLA-3381-1 [email protected]
https://www.debian.org/lts/security/ Chris Lamb
April 04, 2023 https://wiki.debian.org/LTS

Package : ghostscript
Version : 9.27~dfsg-2+deb10u7
CVE ID : CVE-2023-28879
Debian Bug : 1033757

It was discovered that there was a potential buffer-overflow
vulnerability in ghostscript, a popular interpreter for the
PostScript language used, for example, to generate PDF files.

For Debian 10 buster, this problem has been fixed in version
9.27~dfsg-2+deb10u7.

We recommend that you upgrade your ghostscript packages.

For the detailed security status of ghostscript please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/ghostscript

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian11armelghostscript-dbgsym< 9.53.3~dfsg-7+deb11u4ghostscript-dbgsym_9.53.3~dfsg-7+deb11u4_armel.deb
Debian11i386ghostscript< 9.53.3~dfsg-7+deb11u4ghostscript_9.53.3~dfsg-7+deb11u4_i386.deb
Debian11mips64ellibgs9< 9.53.3~dfsg-7+deb11u4libgs9_9.53.3~dfsg-7+deb11u4_mips64el.deb
Debian10armhfghostscript-x< 9.27~dfsg-2+deb10u7ghostscript-x_9.27~dfsg-2+deb10u7_armhf.deb
Debian11armellibgs9-dbgsym< 9.53.3~dfsg-7+deb11u4libgs9-dbgsym_9.53.3~dfsg-7+deb11u4_armel.deb
Debian10arm64libgs9< 9.27~dfsg-2+deb10u7libgs9_9.27~dfsg-2+deb10u7_arm64.deb
Debian11i386ghostscript-x< 9.53.3~dfsg-7+deb11u4ghostscript-x_9.53.3~dfsg-7+deb11u4_i386.deb
Debian10i386libgs9< 9.27~dfsg-2+deb10u7libgs9_9.27~dfsg-2+deb10u7_i386.deb
Debian10amd64ghostscript-x< 9.27~dfsg-2+deb10u7ghostscript-x_9.27~dfsg-2+deb10u7_amd64.deb
Debian11mipselghostscript-x-dbgsym< 9.53.3~dfsg-7+deb11u4ghostscript-x-dbgsym_9.53.3~dfsg-7+deb11u4_mipsel.deb

OS	Version	Architecture	Package	Version	Filename
Debian	11	armel	ghostscript-dbgsym	< 9.53.3~dfsg-7+deb11u4	ghostscript-dbgsym_9.53.3~dfsg-7+deb11u4_armel.deb
Debian	11	i386	ghostscript	< 9.53.3~dfsg-7+deb11u4	ghostscript_9.53.3~dfsg-7+deb11u4_i386.deb
Debian	11	mips64el	libgs9	< 9.53.3~dfsg-7+deb11u4	libgs9_9.53.3~dfsg-7+deb11u4_mips64el.deb
Debian	10	armhf	ghostscript-x	< 9.27~dfsg-2+deb10u7	ghostscript-x_9.27~dfsg-2+deb10u7_armhf.deb
Debian	11	armel	libgs9-dbgsym	< 9.53.3~dfsg-7+deb11u4	libgs9-dbgsym_9.53.3~dfsg-7+deb11u4_armel.deb
Debian	10	arm64	libgs9	< 9.27~dfsg-2+deb10u7	libgs9_9.27~dfsg-2+deb10u7_arm64.deb
Debian	11	i386	ghostscript-x	< 9.53.3~dfsg-7+deb11u4	ghostscript-x_9.53.3~dfsg-7+deb11u4_i386.deb
Debian	10	i386	libgs9	< 9.27~dfsg-2+deb10u7	libgs9_9.27~dfsg-2+deb10u7_i386.deb
Debian	10	amd64	ghostscript-x	< 9.27~dfsg-2+deb10u7	ghostscript-x_9.27~dfsg-2+deb10u7_amd64.deb
Debian	11	mipsel	ghostscript-x-dbgsym	< 9.53.3~dfsg-7+deb11u4	ghostscript-x-dbgsym_9.53.3~dfsg-7+deb11u4_mipsel.deb