{"id":"CLSA-2026-1778749215","summary":"ghostscript: Fix of 2 CVEs","details":"- CVE-2024-29508: heap pointer disclosure in pdf_base_font_alloc via\n  synthesized BaseFont name\n- CVE-2025-48708: argument sanitisation missed '#' separator, leaking\n  -sUserPassword#secret values into output PDF metadata","modified":"2026-06-01T00:32:30.260123819Z","published":"2026-05-14T09:06:42Z","upstream":["CVE-2024-29508","CVE-2025-48708"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1778749215.html"}],"affected":[{"package":{"name":"ghostscript","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ghostscript?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els11"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778749215.json"}},{"package":{"name":"ghostscript-doc","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ghostscript-doc?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els11"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778749215.json"}},{"package":{"name":"ghostscript-gtk","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ghostscript-gtk?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els11"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778749215.json"}},{"package":{"name":"ghostscript-tools-dvipdf","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ghostscript-tools-dvipdf?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els11"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778749215.json"}},{"package":{"name":"ghostscript-tools-fonts","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ghostscript-tools-fonts?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els11"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778749215.json"}},{"package":{"name":"ghostscript-tools-printing","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ghostscript-tools-printing?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els11"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778749215.json"}},{"package":{"name":"ghostscript-x11","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ghostscript-x11?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els11"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778749215.json"}},{"package":{"name":"libgs","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/libgs?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els11"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778749215.json"}},{"package":{"name":"libgs-devel","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/libgs-devel?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els11"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778749215.json"}}],"schema_version":"1.7.5"}