An update for ghostscript is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es) :

* It was found that the ghostscript functions getenv, filenameforall and .libfile did not honor the -dSAFER option, usually used when processing untrusted documents, leading to information disclosure. A specially crafted postscript document could read environment variable, list directory and retrieve file content respectively, from the target. (CVE-2013-5653, CVE-2016-7977)

* It was found that the ghostscript function .setdevice suffered a use-after-free vulnerability due to an incorrect reference count. A specially crafted postscript document could trigger code execution in the context of the gs process. (CVE-2016-7978)

* It was found that the ghostscript function .initialize_dsc_parser did not validate its parameter before using it, allowing a type confusion flaw. A specially crafted postscript document could cause a crash code execution in the context of the gs process. (CVE-2016-7979)

* It was found that ghostscript did not sufficiently check the validity of parameters given to the .sethalftone5 function. A specially crafted postscript document could cause a crash, or execute arbitrary code in the context of the gs process. (CVE-2016-8602)

Note that Tenable Network Security has attempted to extract the preceding description block directly from the corresponding Red Hat security advisory. Virtuozzo provides no description for VZLSA advisories. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - It was found that the ghostscript functions getenv,     filenameforall and .libfile did not honor the -dSAFER     option, usually used when processing untrusted     documents, leading to information disclosure. A     specially crafted postscript document could read     environment variable, list directory and retrieve file     content respectively, from the target. (CVE-2013-5653,     CVE-2016-7977)

  - It was found that the ghostscript function .setdevice     suffered a use-after-free vulnerability due to an     incorrect reference count. A specially crafted     postscript document could trigger code execution in the     context of the gs process. (CVE-2016-7978)

  - It was found that the ghostscript function     .initialize_dsc_parser did not validate its parameter     before using it, allowing a type confusion flaw. A     specially crafted postscript document could cause a     crash code execution in the context of the gs process.
    (CVE-2016-7979)

  - It was found that ghostscript did not sufficiently     check the validity of parameters given to the     .sethalftone5 function. A specially crafted postscript     document could cause a crash, or execute arbitrary code     in the context of the gs process. (CVE-2016-8602)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for ghostscript fixes the following issues :

  - CVE-2016-8602: Fixes a NULL dereference in .sethalftone5     (boo#1004237).

  - CVE-2013-5653, CVE-2016-7978, CVE-2016-7979: Fix     multiple -dsafer related CVE's (boo#1001951).

This is a rebase of **ghostscript** package, to address several security issues :

  - [CVE-2016-7977     ](https://bugzilla.redhat.com/show_bug.cgi?id=1380415) -
    *.libfile does not honor -dSAFER*

  -     [CVE-2013-5653](https://bugzilla.redhat.com/show_bug.cgi     ?id=1380327) - *getenv and filenameforall ignore
    -dSAFER*

  -     [CVE-2016-7976](https://bugzilla.redhat.com/show_bug.cgi     ?id=1382294) - *various userparams allow %pipe% in     paths, allowing remote shell*

  -     [CVE-2016-7978](https://bugzilla.redhat.com/show_bug.cgi     ?id=1382300) - *reference leak in .setdevice allows     use-after-free and remote code*

  -     [CVE-2016-7979](https://bugzilla.redhat.com/show_bug.cgi     ?id=1382305) - *Type confusion in .initialize_dsc_parser     allows remote code execution*

----------- #### INFORMATION FOR FEDORA PACKAGERS & MAINTAINERS :

**ghostscript** has been rebased to latest upstream version (9.20).
Rebase notes :

  - **no API/ABI changes between versions 9.16 -> 9.20     according to upstream**

  - *OpenJPEG* support has been retained

  - *ijs-config* custom tool from upstream has been
    *removed* (by upstream) (*pkg-config* is used by default     now instead, see [commit     0c176a9](http://git.ghostscript.com/?p=ghostpdl.git;h=0c     176a91d53c85cda))

  - some patches were updated to 'git format-patch' format &     renamed

  - rest of the patches were deleted (irrelevant for current     version), mostly because upstream has fixed those issues     in some way

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0418 advisory.

    This advisory aggregates security fixes for the ghostscript SRPM in CIQ LTS 9.2. It addresses 40 CVEs:
    CVE-2016-7979, CVE-2009-0583, CVE-2017-7975, CVE-2019-6116, CVE-2021-3781, and 35 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
101399	Virtuozzo 7 : ghostscript / ghostscript-cups / ghostscript-devel / etc (VZLSA-2017-0013)	Nessus	Virtuozzo Local Security Checks	2017/7/13	2025/12/11	critical
99813	EulerOS 2.0 SP1 : ghostscript (EulerOS-SA-2016-1050)	Nessus	Huawei Local Security Checks	2017/5/1	2025/12/22	critical
94311	openSUSE Security Update : ghostscript (openSUSE-2016-1237)	Nessus	SuSE Local Security Checks	2016/10/27	2026/1/20	critical
94786	Fedora 25 : ghostscript (2016-2df27a2224)	Nessus	Fedora Local Security Checks	2016/11/15	2026/1/19	critical
354894	Rocky Linux 9.2 [CIQ] Security Update: ghostscript / ghostscript-debuginfo / ghostscript-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0418)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	critical

検出

プラグインの検索

critical

critical

critical

critical

critical