Nixpkgs security tracker

Untriaged

Permalink CVE-2023-4042

5.5 MEDIUM

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): NONE
Availability impact (A): HIGH

created 9 months, 1 week ago

Ghostscript: incomplete fix for cve-2020-16305

A flaw was found in ghostscript. The fix for CVE-2020-16305 in ghostscript was not included in RHSA-2021:1852-06 advisory as it was claimed to be. This issue only affects the ghostscript package as shipped with Red Hat Enterprise Linux 8.

References

RHSA-2023:7053 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-4042 vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1870257
RHBZ#2228151 x_refsource_REDHATissue-tracking
RHSA-2023:7053 vendor-advisoryx_refsource_REDHATx_transferred
https://access.redhat.com/security/cve/CVE-2023-4042 vdb-entryx_refsource_REDHATx_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=1870257 x_transferred
RHBZ#2228151 x_refsource_REDHATissue-trackingx_transferred
https://access.redhat.com/security/cve/CVE-2023-4042 vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1870257
RHBZ#2228151 x_refsource_REDHATissue-tracking
https://access.redhat.com/security/cve/CVE-2023-4042 vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1870257
RHBZ#2228151 x_refsource_REDHATissue-tracking
RHSA-2023:7053 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-4042 vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1870257
RHBZ#2228151 x_refsource_REDHATissue-tracking
RHSA-2023:7053 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-4042 vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1870257
RHBZ#2228151 x_refsource_REDHATissue-tracking
RHSA-2023:7053 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-4042 vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1870257
RHBZ#2228151 x_refsource_REDHATissue-tracking
RHSA-2023:7053 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-4042 vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1870257
RHBZ#2228151 x_refsource_REDHATissue-tracking
RHSA-2023:7053 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-4042 vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1870257
RHBZ#2228151 x_refsource_REDHATissue-tracking
RHSA-2023:7053 vendor-advisoryx_refsource_REDHATx_transferred
https://access.redhat.com/security/cve/CVE-2023-4042 vdb-entryx_refsource_REDHATx_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=1870257 x_transferred
RHBZ#2228151 x_refsource_REDHATissue-trackingx_transferred
RHSA-2023:7053 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-4042 vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1870257
RHBZ#2228151 x_refsource_REDHATissue-tracking
RHSA-2023:7053 vendor-advisoryx_refsource_REDHATx_transferred
https://access.redhat.com/security/cve/CVE-2023-4042 vdb-entryx_refsource_REDHATx_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=1870257 x_transferred
RHBZ#2228151 x_refsource_REDHATissue-trackingx_transferred
RHSA-2023:7053 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-4042 vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1870257
RHBZ#2228151 x_refsource_REDHATissue-tracking
RHSA-2023:7053 vendor-advisoryx_refsource_REDHATx_transferred
https://access.redhat.com/security/cve/CVE-2023-4042 vdb-entryx_refsource_REDHATx_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=1870257 x_transferred
RHBZ#2228151 x_refsource_REDHATissue-trackingx_transferred
RHSA-2023:7053 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-4042 vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1870257
RHBZ#2228151 x_refsource_REDHATissue-tracking
RHSA-2023:7053 vendor-advisoryx_refsource_REDHATx_transferred
https://access.redhat.com/security/cve/CVE-2023-4042 vdb-entryx_refsource_REDHATx_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=1870257 x_transferred
RHBZ#2228151 x_refsource_REDHATissue-trackingx_transferred
RHSA-2023:7053 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-4042 vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1870257
RHBZ#2228151 x_refsource_REDHATissue-tracking
RHSA-2023:7053 vendor-advisoryx_refsource_REDHATx_transferred
https://access.redhat.com/security/cve/CVE-2023-4042 vdb-entryx_refsource_REDHATx_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=1870257 x_transferred
RHBZ#2228151 x_refsource_REDHATissue-trackingx_transferred
RHSA-2023:7053 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-4042 vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1870257
RHBZ#2228151 x_refsource_REDHATissue-tracking
RHSA-2023:7053 vendor-advisoryx_refsource_REDHATx_transferred
https://access.redhat.com/security/cve/CVE-2023-4042 vdb-entryx_refsource_REDHATx_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=1870257 x_transferred
RHBZ#2228151 x_refsource_REDHATissue-trackingx_transferred
RHSA-2023:7053 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-4042 vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1870257
RHBZ#2228151 x_refsource_REDHATissue-tracking
RHSA-2023:7053 vendor-advisoryx_refsource_REDHATx_transferred
https://access.redhat.com/security/cve/CVE-2023-4042 vdb-entryx_refsource_REDHATx_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=1870257 x_transferred
RHBZ#2228151 x_refsource_REDHATissue-trackingx_transferred
RHSA-2023:7053 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-4042 vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1870257
RHBZ#2228151 x_refsource_REDHATissue-tracking
RHSA-2023:7053 vendor-advisoryx_refsource_REDHATx_transferred
https://access.redhat.com/security/cve/CVE-2023-4042 vdb-entryx_refsource_REDHATx_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=1870257 x_transferred
RHBZ#2228151 x_refsource_REDHATissue-trackingx_transferred
RHSA-2023:7053 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-4042 vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1870257
RHBZ#2228151 x_refsource_REDHATissue-tracking
RHSA-2023:7053 vendor-advisoryx_refsource_REDHATx_transferred
https://access.redhat.com/security/cve/CVE-2023-4042 vdb-entryx_refsource_REDHATx_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=1870257 x_transferred
RHBZ#2228151 x_refsource_REDHATissue-trackingx_transferred
RHSA-2023:7053 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-4042 vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1870257
RHBZ#2228151 x_refsource_REDHATissue-tracking
RHSA-2023:7053 vendor-advisoryx_refsource_REDHATx_transferred
https://access.redhat.com/security/cve/CVE-2023-4042 vdb-entryx_refsource_REDHATx_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=1870257 x_transferred
RHBZ#2228151 x_refsource_REDHATissue-trackingx_transferred

Affected products

ghostscript

*
==9.51

gimp:flatpak/ghostscript

Matching in nixpkgs

pkgs.ghostscriptX

PostScript interpreter (mainline version)

nixos-unstable 10.05.1
- nixpkgs-unstable 10.05.1
- nixos-unstable-small 10.05.1

pkgs.ghostscript_headless

PostScript interpreter (mainline version)

nixos-unstable 10.05.1
- nixpkgs-unstable 10.05.1
- nixos-unstable-small 10.05.1

pkgs.python312Packages.ghostscript

Interface to the Ghostscript C-API using ctypes.

nixos-unstable 0.7
- nixpkgs-unstable 0.7
- nixos-unstable-small 0.7

pkgs.python313Packages.ghostscript

Interface to the Ghostscript C-API using ctypes.

nixos-unstable 0.7
- nixpkgs-unstable 0.7
- nixos-unstable-small 0.7

pkgs.tests.texlive.dvipng.ghostscript

None

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small

pkgs.haskellPackages.ghostscript-parallel

Let Ghostscript render pages in parallel

nixos-unstable 0.0.1
- nixpkgs-unstable 0.0.1
- nixos-unstable-small 0.0.1

Package maintainers

@tobim Tobias Mayer <nix@tobim.fastmail.fm>
@flokli Florian Klink <flokli@flokli.de>

Suggestion detail