Linux · Security advisory · April 30, 2025

ALSA-2025:4362: Security update for 8 packages

ALSA-2025:4362, released April 30, 2025, fixes 7 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
7
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0153
74th percentile

Priority of the 7 CVEs

Patch now 0 Urgent 0 High 7 Routine 0

Fixed package versions

ProductReleaseFixed in
ghostscriptalmalinux 89.27-16.el8_10
ghostscript-docalmalinux 89.27-16.el8_10
ghostscript-tools-dvipdfalmalinux 89.27-16.el8_10
ghostscript-tools-fontsalmalinux 89.27-16.el8_10
ghostscript-tools-printingalmalinux 89.27-16.el8_10
ghostscript-x11almalinux 89.27-16.el8_10
libgsalmalinux 89.27-16.el8_10
libgs-develalmalinux 89.27-16.el8_10

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-46751 ghostscript: The Ghostscript suite contains utilities for rendering PostScript and PDF documents 7.8 0.0153 None reported
High CVE-2024-46954 ghostscript: An issue was discovered in decode_utf8 in base/gp_utf8.c in ArtifexGhostscript before 10.04.0 7.8 0.0055 None reported
High CVE-2020-27792 ghostscript: The Ghostscript suite contains utilities for rendering PostScript and PDF documents 7.8 0.0047 None reported
High CVE-2024-46956 ghostscript: An issue was discovered in psi/zfile.c in Artifex Ghostscript before10.04.0 7.8 0.0039 None reported
High CVE-2024-46953 ghostscript: An issue was discovered in base/gsdevice.c in Artifex Ghostscript before10.04.0 7.8 0.0039 None reported
High CVE-2024-46951 ghostscript: An issue was discovered in psi/zcolor.c in Artifex Ghostscript before10.04.0 7.8 0.0036 None reported
High CVE-2024-46952 ghostscript: An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before10.04.0 7.8 0.0032 None reported
Showing 1 to 7 of 7 1