ALAS2023-2025-1218

References: CVE-2025-59798  CVE-2025-59799  CVE-2025-59800 
FAQs regarding Amazon Linux ALAS/CVE Severity

Issue Overview:

Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdf_write_cmap in devices/vector/gdevpdtw.c. (CVE-2025-59798)

Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdfmark_coerce_dest in devices/vector/gdevpdfm.c via a large size value. (CVE-2025-59799)

In Artifex Ghostscript through 10.05.1, ocr_begin_page in devices/gdevpdfocr.c has an integer overflow that leads to a heap-based buffer overflow in ocr_line8. (CVE-2025-59800)

Issue Correction:
Run dnf update ghostscript --releasever 2023.9.20251014 or dnf update --advisory ALAS2023-2025-1218 --releasever 2023.9.20251014 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation

New Packages:

aarch64:
    libgs-debuginfo-9.56.1-7.amzn2023.0.19.aarch64
    ghostscript-tools-fonts-9.56.1-7.amzn2023.0.19.aarch64
    ghostscript-gtk-9.56.1-7.amzn2023.0.19.aarch64
    ghostscript-debuginfo-9.56.1-7.amzn2023.0.19.aarch64
    ghostscript-x11-debuginfo-9.56.1-7.amzn2023.0.19.aarch64
    ghostscript-x11-9.56.1-7.amzn2023.0.19.aarch64
    ghostscript-9.56.1-7.amzn2023.0.19.aarch64
    ghostscript-tools-printing-9.56.1-7.amzn2023.0.19.aarch64
    libgs-9.56.1-7.amzn2023.0.19.aarch64
    ghostscript-tools-dvipdf-9.56.1-7.amzn2023.0.19.aarch64
    libgs-devel-9.56.1-7.amzn2023.0.19.aarch64
    ghostscript-gtk-debuginfo-9.56.1-7.amzn2023.0.19.aarch64
    ghostscript-debugsource-9.56.1-7.amzn2023.0.19.aarch64

noarch:
    ghostscript-doc-9.56.1-7.amzn2023.0.19.noarch

src:
    ghostscript-9.56.1-7.amzn2023.0.19.src

x86_64:
    libgs-debuginfo-9.56.1-7.amzn2023.0.19.x86_64
    ghostscript-tools-dvipdf-9.56.1-7.amzn2023.0.19.x86_64
    ghostscript-debuginfo-9.56.1-7.amzn2023.0.19.x86_64
    ghostscript-gtk-debuginfo-9.56.1-7.amzn2023.0.19.x86_64
    libgs-devel-9.56.1-7.amzn2023.0.19.x86_64
    ghostscript-9.56.1-7.amzn2023.0.19.x86_64
    ghostscript-gtk-9.56.1-7.amzn2023.0.19.x86_64
    ghostscript-tools-printing-9.56.1-7.amzn2023.0.19.x86_64
    ghostscript-tools-fonts-9.56.1-7.amzn2023.0.19.x86_64
    ghostscript-x11-debuginfo-9.56.1-7.amzn2023.0.19.x86_64
    ghostscript-x11-9.56.1-7.amzn2023.0.19.x86_64
    libgs-9.56.1-7.amzn2023.0.19.x86_64
    ghostscript-debugsource-9.56.1-7.amzn2023.0.19.x86_64