ALAS-2023-1835

Related Vulnerabilities: CVE-2020-21890  

Buffer Overflow vulnerability in clj_media_size function in devices/gdevclj.c in Artifex Ghostscript 9.50 allows remote attackers to cause a denial of service or other unspecified impact(s) via opening of crafted PDF document. (CVE-2020-21890)

ALAS-2023-1835


Amazon Linux AMI Security Advisory: ALAS-2023-1835
Advisory Release Date: 2023-09-13 23:15 Pacific
Advisory Updated Date: 2023-09-25 20:12 Pacific
Severity: Important

Issue Overview:

Buffer Overflow vulnerability in clj_media_size function in devices/gdevclj.c in Artifex Ghostscript 9.50 allows remote attackers to cause a denial of service or other unspecified impact(s) via opening of crafted PDF document. (CVE-2020-21890)


Affected Packages:

ghostscript


Issue Correction:
Run yum update ghostscript to update your system.

New Packages:
i686:
    ghostscript-debuginfo-8.70-24.30.amzn1.i686
    ghostscript-8.70-24.30.amzn1.i686
    ghostscript-devel-8.70-24.30.amzn1.i686
    ghostscript-doc-8.70-24.30.amzn1.i686

src:
    ghostscript-8.70-24.30.amzn1.src

x86_64:
    ghostscript-debuginfo-8.70-24.30.amzn1.x86_64
    ghostscript-doc-8.70-24.30.amzn1.x86_64
    ghostscript-8.70-24.30.amzn1.x86_64
    ghostscript-devel-8.70-24.30.amzn1.x86_64