[CLSA-2026:1793893414] ghostscript: Fix of 8 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-05 15:43:51 UTC
Description:
- CVE-2018-10194: pdfwrite: guard against writing an infinite text distance - CVE-2018-15909: hide .shfill and type-check shading parameters - CVE-2018-15910: iparam: do not write through an uninitialised result pointer - CVE-2018-15911: AES: reject invalid key lengths before use - CVE-2018-16511: type-check the operand of .type - CVE-2018-16540: pdf14: fix use-after-free in copydevice - CVE-2018-16802: page device restore: check stack space so LockSafetyParams is restored - CVE-2018-17183: do not pass hidden operators to user error handlers
Updated packages:
  • ghostscript-8.70-24.el6_10.2.tuxcare.els1.i686.rpm
    sha:518eb0ad6e80e73e5986387055396f67d819508f3b8c1c91a1b68bc9fbdc76bf
  • ghostscript-8.70-24.el6_10.2.tuxcare.els1.x86_64.rpm
    sha:4165f255aabaf7120710b25eb385141ac2426e26e2c34283a58747d570410352
  • ghostscript-devel-8.70-24.el6_10.2.tuxcare.els1.i686.rpm
    sha:307b60a990f6c5078f26bacf6ffe89880c3d25da18a5aa9e9f34ac621d5dbd4b
  • ghostscript-devel-8.70-24.el6_10.2.tuxcare.els1.x86_64.rpm
    sha:96a93ae13611a40c1d66e3cbf8d84b88da26a9c776cf7af9567271ec40d198e5
  • ghostscript-doc-8.70-24.el6_10.2.tuxcare.els1.i686.rpm
    sha:9cefc76836a048f4700ed98ecb75f1dabf5beb2611d487a434d76e4cc6630c61
  • ghostscript-doc-8.70-24.el6_10.2.tuxcare.els1.x86_64.rpm
    sha:cd3e17fd844f2e0c6c45f7ee9e766977af74004937201f113653ba4a382048dc
  • ghostscript-gtk-8.70-24.el6_10.2.tuxcare.els1.i686.rpm
    sha:05103d0eec70439e76e2d399e51b1c8b0cba81d22042fd009c1f427983a0169b
  • ghostscript-gtk-8.70-24.el6_10.2.tuxcare.els1.x86_64.rpm
    sha:d31f93a39f3cbfacef34337e1938bb2fbf9ac7b37b09d67805ccea1d34cbd51f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.