Vulmon
Amazon Linux AMI Security Advisory: ALAS-2023-1725
Advisory Release Date: 2023-03-30 22:50 Pacific
Advisory Updated Date: 2023-04-05 20:22 Pacific
Severity:
Important
Issue Overview:
A heap-based buffer over write vulnerability was found in GhostScript's lp8000_print_page() function in gdevlp8k.c file. An attacker could trick a user to open a crafted PDF file, triggering the heap buffer overflow that could lead to memory corruption or a denial of service. (CVE-2020-27792)
Affected Packages:
ghostscript
Issue Correction:
Run yum update ghostscript to update your system.
New Packages:
i686:
ghostscript-doc-8.70-24.27.amzn1.i686
ghostscript-8.70-24.27.amzn1.i686
ghostscript-devel-8.70-24.27.amzn1.i686
ghostscript-debuginfo-8.70-24.27.amzn1.i686
src:
ghostscript-8.70-24.27.amzn1.src
x86_64:
ghostscript-devel-8.70-24.27.amzn1.x86_64
ghostscript-doc-8.70-24.27.amzn1.x86_64
ghostscript-8.70-24.27.amzn1.x86_64
ghostscript-debuginfo-8.70-24.27.amzn1.x86_64