ALAS2-2025-2820

Amazon Linux 2 Security Advisory: ALAS2-2025-2820
Advisory Released Date: 2025-04-16
Advisory Updated Date: 2025-04-16
Severity: Important
Issue Overview:

Fix confusion between bytes and shorts. Data is being copied from a string in multiple of shorts, rather than multiple of bytes, leading to both a read (probably benign, given the memory manager) and write buffer overflow.

Info: https://bugs.ghostscript.com/show_bug.cgi?id=708131
Patch: https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=de900010a6f2310d1fd54e99eeba466693da0e13 (ghostpdl-10.05.0) (CVE-2025-27835)

Potential print buffer overflow. Fixed in ghostpdl-10.05.0 by implementing stricter buffer length validation.

Info: https://bugs.ghostscript.com/show_bug.cgi?id=708192
Patch: https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=8b6d19b2b4079da6863ef25f2370f25d4b054919 (ghostpdl-10.05.0) (CVE-2025-27836)

Patch to error check UTF-8 conversions. Fixed in ghostpdl-10.05.0 by adding a check on the value returned by the gp_utf8_to_uint16 function.

Info: https://bugs.ghostscript.com/show_bug.cgi?id=708238
Patch: https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=dbb9f2b11f820697e77863523a8d835ab040e5d1 (ghostpdl-10.05.0) (CVE-2025-27837)


Affected Packages:

ghostscript


Note:

This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.


Issue Correction:
Run yum update ghostscript to update your system.

New Packages:
aarch64:
    ghostscript-9.54.0-9.amzn2.0.10.aarch64
    libgs-9.54.0-9.amzn2.0.10.aarch64
    libgs-devel-9.54.0-9.amzn2.0.10.aarch64
    ghostscript-gtk-9.54.0-9.amzn2.0.10.aarch64
    ghostscript-cups-9.54.0-9.amzn2.0.10.aarch64
    ghostscript-debuginfo-9.54.0-9.amzn2.0.10.aarch64

i686:
    ghostscript-9.54.0-9.amzn2.0.10.i686
    libgs-9.54.0-9.amzn2.0.10.i686
    libgs-devel-9.54.0-9.amzn2.0.10.i686
    ghostscript-gtk-9.54.0-9.amzn2.0.10.i686
    ghostscript-cups-9.54.0-9.amzn2.0.10.i686
    ghostscript-debuginfo-9.54.0-9.amzn2.0.10.i686

noarch:
    ghostscript-doc-9.54.0-9.amzn2.0.10.noarch

src:
    ghostscript-9.54.0-9.amzn2.0.10.src

x86_64:
    ghostscript-9.54.0-9.amzn2.0.10.x86_64
    libgs-9.54.0-9.amzn2.0.10.x86_64
    libgs-devel-9.54.0-9.amzn2.0.10.x86_64
    ghostscript-gtk-9.54.0-9.amzn2.0.10.x86_64
    ghostscript-cups-9.54.0-9.amzn2.0.10.x86_64
    ghostscript-debuginfo-9.54.0-9.amzn2.0.10.x86_64

Additional References

Release Notes:  Amazon Linux 2 Release Notes

Red Hat: CVE-2025-27835, CVE-2025-27836, CVE-2025-27837

Mitre: CVE-2025-27835, CVE-2025-27836, CVE-2025-27837