ALAS-2025-906


Amazon Linux 2023 Security Advisory: ALAS-2025-906
Advisory Release Date: 2025-03-26 20:44 Pacific
Advisory Updated Date: 2025-04-01 11:34 Pacific
Severity: Important

Issue Overview:

Buffer overflow in Ghostscript new PDF Interpreter (PDFI). (CVE-2025-27833)


Affected Packages:

ghostscript


Issue Correction:
Run dnf update ghostscript --releasever 2023.7.20250331 to update your system.

New Packages:
aarch64:
    ghostscript-tools-dvipdf-9.56.1-7.amzn2023.0.13.aarch64
    libgs-devel-9.56.1-7.amzn2023.0.13.aarch64
    ghostscript-tools-fonts-9.56.1-7.amzn2023.0.13.aarch64
    ghostscript-gtk-debuginfo-9.56.1-7.amzn2023.0.13.aarch64
    ghostscript-debuginfo-9.56.1-7.amzn2023.0.13.aarch64
    ghostscript-tools-printing-9.56.1-7.amzn2023.0.13.aarch64
    ghostscript-9.56.1-7.amzn2023.0.13.aarch64
    libgs-debuginfo-9.56.1-7.amzn2023.0.13.aarch64
    ghostscript-x11-9.56.1-7.amzn2023.0.13.aarch64
    ghostscript-gtk-9.56.1-7.amzn2023.0.13.aarch64
    libgs-9.56.1-7.amzn2023.0.13.aarch64
    ghostscript-x11-debuginfo-9.56.1-7.amzn2023.0.13.aarch64
    ghostscript-debugsource-9.56.1-7.amzn2023.0.13.aarch64

noarch:
    ghostscript-doc-9.56.1-7.amzn2023.0.13.noarch

src:
    ghostscript-9.56.1-7.amzn2023.0.13.src

x86_64:
    ghostscript-gtk-debuginfo-9.56.1-7.amzn2023.0.13.x86_64
    libgs-devel-9.56.1-7.amzn2023.0.13.x86_64
    ghostscript-x11-9.56.1-7.amzn2023.0.13.x86_64
    ghostscript-x11-debuginfo-9.56.1-7.amzn2023.0.13.x86_64
    ghostscript-debuginfo-9.56.1-7.amzn2023.0.13.x86_64
    libgs-debuginfo-9.56.1-7.amzn2023.0.13.x86_64
    ghostscript-gtk-9.56.1-7.amzn2023.0.13.x86_64
    ghostscript-tools-dvipdf-9.56.1-7.amzn2023.0.13.x86_64
    ghostscript-tools-printing-9.56.1-7.amzn2023.0.13.x86_64
    ghostscript-tools-fonts-9.56.1-7.amzn2023.0.13.x86_64
    ghostscript-9.56.1-7.amzn2023.0.13.x86_64
    libgs-9.56.1-7.amzn2023.0.13.x86_64
    ghostscript-debugsource-9.56.1-7.amzn2023.0.13.x86_64