gimp:flatpak/ghostscript vulnerabilities
CVEs whose affected-version data names the gimp:flatpak/ghostscript package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2023-4042Medium· 5.5Ghostscript: incomplete fix for cve-2020-16305
A flaw was found in ghostscript. The fix for CVE-2020-16305 in ghostscript was not included in RHSA-2021:1852-06 advisory as it was claimed to be. This issue only affects the ghostscript package as shipped with Red Hat Enterprise Linux 8.
▾ SunlitRed Hat · ghostscriptEPSS 0.34%via CVEORG
CVE-2023-38560Medium· 5.5Ghostscript: integer overflow in pcl/pl/plfont.c:418 in pl_glyph_name
An integer overflow flaw was found in pcl/pl/plfont.c:418 in pl_glyph_name in ghostscript. This issue may allow a local attacker to cause a denial of service via transforming a crafted PCL file to PDF format.
▾ SunlitRed Hat · ghostscriptEPSS 0.32%via CVEORG