USN-7623-1

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/notices/USN-7623-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7623-1.json
JSON Data
https://api.osv.dev/v1/vulns/USN-7623-1
Related
Published
2025-07-08T03:48:52.273923Z
Modified
2025-07-09T06:02:12.491757Z
Upstream
Summary
ghostscript vulnerabilities
Details

It was discovered that OpenJPEG, vendored in Ghostscript did not correctly handle large image files. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2023-39327) Thomas Rinsma discovered that Ghostscript did not correctly handle printing certain variables. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2024-29508) It was discovered that Ghostscript did not correctly handle loading certain libraries. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. (CVE-2024-33871) It was discovered that Ghostscript did not correctly handle certain memory operations. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2024-56826, CVE-2024-56827, CVE-2025-27832, CVE-2025-27835, CVE-2025-27836) Vasileios Flengas discovered that Ghostscript did not correctly handle argument sanitization. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 24.10 and Ubuntu 25.04. (CVE-2025-48708)

References

Affected packages

Ubuntu:Pro:16.04:LTS / ghostscript

Package

Name
ghostscript
Purl
pkg:deb/ubuntu/ghostscript@9.26~dfsg+0-0ubuntu0.16.04.14+esm9?arch=source&distro=esm-infra/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.26~dfsg+0-0ubuntu0.16.04.14+esm9

Affected versions

9.*

9.16~dfsg~0-0ubuntu3
9.16~dfsg~0-0ubuntu4
9.18~dfsg~0-0ubuntu1
9.18~dfsg~0-0ubuntu2
9.18~dfsg~0-0ubuntu2.2
9.18~dfsg~0-0ubuntu2.3
9.18~dfsg~0-0ubuntu2.4
9.18~dfsg~0-0ubuntu2.6
9.18~dfsg~0-0ubuntu2.7
9.18~dfsg~0-0ubuntu2.8
9.18~dfsg~0-0ubuntu2.9
9.25~dfsg+1-0ubuntu0.16.04.1
9.25~dfsg+1-0ubuntu0.16.04.2
9.25~dfsg+1-0ubuntu0.16.04.3
9.26~dfsg+0-0ubuntu0.16.04.1
9.26~dfsg+0-0ubuntu0.16.04.3
9.26~dfsg+0-0ubuntu0.16.04.4
9.26~dfsg+0-0ubuntu0.16.04.5
9.26~dfsg+0-0ubuntu0.16.04.6
9.26~dfsg+0-0ubuntu0.16.04.7
9.26~dfsg+0-0ubuntu0.16.04.8
9.26~dfsg+0-0ubuntu0.16.04.9
9.26~dfsg+0-0ubuntu0.16.04.10
9.26~dfsg+0-0ubuntu0.16.04.11
9.26~dfsg+0-0ubuntu0.16.04.12
9.26~dfsg+0-0ubuntu0.16.04.13
9.26~dfsg+0-0ubuntu0.16.04.14
9.26~dfsg+0-0ubuntu0.16.04.14+esm1
9.26~dfsg+0-0ubuntu0.16.04.14+esm2
9.26~dfsg+0-0ubuntu0.16.04.14+esm3
9.26~dfsg+0-0ubuntu0.16.04.14+esm4
9.26~dfsg+0-0ubuntu0.16.04.14+esm5
9.26~dfsg+0-0ubuntu0.16.04.14+esm6
9.26~dfsg+0-0ubuntu0.16.04.14+esm7
9.26~dfsg+0-0ubuntu0.16.04.14+esm8

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.14+esm9",
            "binary_name": "ghostscript"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.14+esm9",
            "binary_name": "ghostscript-dbg"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.14+esm9",
            "binary_name": "ghostscript-dbgsym"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.14+esm9",
            "binary_name": "ghostscript-doc"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.14+esm9",
            "binary_name": "ghostscript-x"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.14+esm9",
            "binary_name": "ghostscript-x-dbgsym"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.14+esm9",
            "binary_name": "libgs-dev"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.14+esm9",
            "binary_name": "libgs-dev-dbgsym"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.14+esm9",
            "binary_name": "libgs9"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.14+esm9",
            "binary_name": "libgs9-common"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.14+esm9",
            "binary_name": "libgs9-dbgsym"
        }
    ],
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}

Ubuntu:Pro:18.04:LTS / ghostscript

Package

Name
ghostscript
Purl
pkg:deb/ubuntu/ghostscript@9.26~dfsg+0-0ubuntu0.18.04.18+esm4?arch=source&distro=esm-infra/bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.26~dfsg+0-0ubuntu0.18.04.18+esm4

Affected versions

9.*

9.21~dfsg+1-0ubuntu3
9.22~dfsg+1-0ubuntu1
9.22~dfsg+1-0ubuntu1.1
9.22~dfsg+1-0ubuntu1.2
9.25~dfsg+1-0ubuntu0.18.04.1
9.25~dfsg+1-0ubuntu0.18.04.2
9.26~dfsg+0-0ubuntu0.18.04.1
9.26~dfsg+0-0ubuntu0.18.04.3
9.26~dfsg+0-0ubuntu0.18.04.4
9.26~dfsg+0-0ubuntu0.18.04.5
9.26~dfsg+0-0ubuntu0.18.04.6
9.26~dfsg+0-0ubuntu0.18.04.7
9.26~dfsg+0-0ubuntu0.18.04.8
9.26~dfsg+0-0ubuntu0.18.04.9
9.26~dfsg+0-0ubuntu0.18.04.10
9.26~dfsg+0-0ubuntu0.18.04.11
9.26~dfsg+0-0ubuntu0.18.04.12
9.26~dfsg+0-0ubuntu0.18.04.13
9.26~dfsg+0-0ubuntu0.18.04.14
9.26~dfsg+0-0ubuntu0.18.04.15
9.26~dfsg+0-0ubuntu0.18.04.16
9.26~dfsg+0-0ubuntu0.18.04.17
9.26~dfsg+0-0ubuntu0.18.04.18
9.26~dfsg+0-0ubuntu0.18.04.18+esm1
9.26~dfsg+0-0ubuntu0.18.04.18+esm2
9.26~dfsg+0-0ubuntu0.18.04.18+esm3

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.18.04.18+esm4",
            "binary_name": "ghostscript"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.18.04.18+esm4",
            "binary_name": "ghostscript-dbg"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.18.04.18+esm4",
            "binary_name": "ghostscript-doc"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.18.04.18+esm4",
            "binary_name": "ghostscript-x"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.18.04.18+esm4",
            "binary_name": "libgs-dev"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.18.04.18+esm4",
            "binary_name": "libgs9"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.18.04.18+esm4",
            "binary_name": "libgs9-common"
        }
    ],
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}

Ubuntu:Pro:20.04:LTS / ghostscript

Package

Name
ghostscript
Purl
pkg:deb/ubuntu/ghostscript@9.50~dfsg-5ubuntu4.15+esm1?arch=source&distro=esm-infra/focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.50~dfsg-5ubuntu4.15+esm1

Affected versions

9.*

9.27~dfsg+0-0ubuntu3
9.27~dfsg+0-0ubuntu4
9.50~dfsg-5ubuntu1
9.50~dfsg-5ubuntu2
9.50~dfsg-5ubuntu3
9.50~dfsg-5ubuntu4
9.50~dfsg-5ubuntu4.1
9.50~dfsg-5ubuntu4.2
9.50~dfsg-5ubuntu4.3
9.50~dfsg-5ubuntu4.4
9.50~dfsg-5ubuntu4.5
9.50~dfsg-5ubuntu4.6
9.50~dfsg-5ubuntu4.7
9.50~dfsg-5ubuntu4.8
9.50~dfsg-5ubuntu4.9
9.50~dfsg-5ubuntu4.10
9.50~dfsg-5ubuntu4.11
9.50~dfsg-5ubuntu4.12
9.50~dfsg-5ubuntu4.13
9.50~dfsg-5ubuntu4.14
9.50~dfsg-5ubuntu4.15

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "9.50~dfsg-5ubuntu4.15+esm1",
            "binary_name": "ghostscript"
        },
        {
            "binary_version": "9.50~dfsg-5ubuntu4.15+esm1",
            "binary_name": "ghostscript-dbg"
        },
        {
            "binary_version": "9.50~dfsg-5ubuntu4.15+esm1",
            "binary_name": "ghostscript-doc"
        },
        {
            "binary_version": "9.50~dfsg-5ubuntu4.15+esm1",
            "binary_name": "ghostscript-x"
        },
        {
            "binary_version": "9.50~dfsg-5ubuntu4.15+esm1",
            "binary_name": "libgs-dev"
        },
        {
            "binary_version": "9.50~dfsg-5ubuntu4.15+esm1",
            "binary_name": "libgs9"
        },
        {
            "binary_version": "9.50~dfsg-5ubuntu4.15+esm1",
            "binary_name": "libgs9-common"
        }
    ],
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}

Ubuntu:22.04:LTS / ghostscript

Package

Name
ghostscript
Purl
pkg:deb/ubuntu/ghostscript@9.55.0~dfsg1-0ubuntu5.12?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.55.0~dfsg1-0ubuntu5.12

Affected versions

9.*

9.54.0~dfsg1-0ubuntu2
9.55.0~dfsg1-0ubuntu4
9.55.0~dfsg1-0ubuntu5
9.55.0~dfsg1-0ubuntu5.1
9.55.0~dfsg1-0ubuntu5.2
9.55.0~dfsg1-0ubuntu5.3
9.55.0~dfsg1-0ubuntu5.4
9.55.0~dfsg1-0ubuntu5.5
9.55.0~dfsg1-0ubuntu5.6
9.55.0~dfsg1-0ubuntu5.7
9.55.0~dfsg1-0ubuntu5.9
9.55.0~dfsg1-0ubuntu5.10
9.55.0~dfsg1-0ubuntu5.11

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "9.55.0~dfsg1-0ubuntu5.12",
            "binary_name": "ghostscript"
        },
        {
            "binary_version": "9.55.0~dfsg1-0ubuntu5.12",
            "binary_name": "ghostscript-dbgsym"
        },
        {
            "binary_version": "9.55.0~dfsg1-0ubuntu5.12",
            "binary_name": "ghostscript-doc"
        },
        {
            "binary_version": "9.55.0~dfsg1-0ubuntu5.12",
            "binary_name": "ghostscript-x"
        },
        {
            "binary_version": "9.55.0~dfsg1-0ubuntu5.12",
            "binary_name": "ghostscript-x-dbgsym"
        },
        {
            "binary_version": "9.55.0~dfsg1-0ubuntu5.12",
            "binary_name": "libgs-dev"
        },
        {
            "binary_version": "9.55.0~dfsg1-0ubuntu5.12",
            "binary_name": "libgs9"
        },
        {
            "binary_version": "9.55.0~dfsg1-0ubuntu5.12",
            "binary_name": "libgs9-common"
        },
        {
            "binary_version": "9.55.0~dfsg1-0ubuntu5.12",
            "binary_name": "libgs9-dbgsym"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:24.10 / ghostscript

Package

Name
ghostscript
Purl
pkg:deb/ubuntu/ghostscript@10.03.1~dfsg1-0ubuntu2.4?arch=source&distro=oracular

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
10.03.1~dfsg1-0ubuntu2.4

Affected versions

10.*

10.02.1~dfsg1-0ubuntu7
10.02.1~dfsg1-0ubuntu9
10.03.1~dfsg1-0ubuntu2
10.03.1~dfsg1-0ubuntu2.1
10.03.1~dfsg1-0ubuntu2.2
10.03.1~dfsg1-0ubuntu2.3

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "10.03.1~dfsg1-0ubuntu2.4",
            "binary_name": "ghostscript"
        },
        {
            "binary_version": "10.03.1~dfsg1-0ubuntu2.4",
            "binary_name": "ghostscript-dbgsym"
        },
        {
            "binary_version": "10.03.1~dfsg1-0ubuntu2.4",
            "binary_name": "ghostscript-doc"
        },
        {
            "binary_version": "10.03.1~dfsg1-0ubuntu2.4",
            "binary_name": "libgs-common"
        },
        {
            "binary_version": "10.03.1~dfsg1-0ubuntu2.4",
            "binary_name": "libgs-dev"
        },
        {
            "binary_version": "10.03.1~dfsg1-0ubuntu2.4",
            "binary_name": "libgs10"
        },
        {
            "binary_version": "10.03.1~dfsg1-0ubuntu2.4",
            "binary_name": "libgs10-common"
        },
        {
            "binary_version": "10.03.1~dfsg1-0ubuntu2.4",
            "binary_name": "libgs10-dbgsym"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:24.04:LTS / ghostscript

Package

Name
ghostscript
Purl
pkg:deb/ubuntu/ghostscript@10.02.1~dfsg1-0ubuntu7.7?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
10.02.1~dfsg1-0ubuntu7.7

Affected versions

10.*

10.01.2~dfsg1-0ubuntu2
10.01.2~dfsg1-0ubuntu2.1
10.02.1~dfsg1-0ubuntu1
10.02.1~dfsg1-0ubuntu2
10.02.1~dfsg1-0ubuntu5
10.02.1~dfsg1-0ubuntu6
10.02.1~dfsg1-0ubuntu7
10.02.1~dfsg1-0ubuntu7.1
10.02.1~dfsg1-0ubuntu7.3
10.02.1~dfsg1-0ubuntu7.4
10.02.1~dfsg1-0ubuntu7.5
10.02.1~dfsg1-0ubuntu7.6

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "10.02.1~dfsg1-0ubuntu7.7",
            "binary_name": "ghostscript"
        },
        {
            "binary_version": "10.02.1~dfsg1-0ubuntu7.7",
            "binary_name": "ghostscript-dbgsym"
        },
        {
            "binary_version": "10.02.1~dfsg1-0ubuntu7.7",
            "binary_name": "ghostscript-doc"
        },
        {
            "binary_version": "10.02.1~dfsg1-0ubuntu7.7",
            "binary_name": "libgs-common"
        },
        {
            "binary_version": "10.02.1~dfsg1-0ubuntu7.7",
            "binary_name": "libgs-dev"
        },
        {
            "binary_version": "10.02.1~dfsg1-0ubuntu7.7",
            "binary_name": "libgs10"
        },
        {
            "binary_version": "10.02.1~dfsg1-0ubuntu7.7",
            "binary_name": "libgs10-common"
        },
        {
            "binary_version": "10.02.1~dfsg1-0ubuntu7.7",
            "binary_name": "libgs10-dbgsym"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:25.04 / ghostscript

Package

Name
ghostscript
Purl
pkg:deb/ubuntu/ghostscript@10.05.0dfsg1-0ubuntu1.1?arch=source&distro=plucky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
10.05.0dfsg1-0ubuntu1.1

Affected versions

10.*

10.03.1~dfsg1-0ubuntu2
10.03.1~dfsg1-0ubuntu3
10.03.1~dfsg1-0ubuntu4
10.04.0~dfsg1-2ubuntu1
10.05.0~rc1~dfsg1-0ubuntu1
10.05.0dfsg1-0ubuntu1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "10.05.0dfsg1-0ubuntu1.1",
            "binary_name": "ghostscript"
        },
        {
            "binary_version": "10.05.0dfsg1-0ubuntu1.1",
            "binary_name": "ghostscript-dbgsym"
        },
        {
            "binary_version": "10.05.0dfsg1-0ubuntu1.1",
            "binary_name": "ghostscript-doc"
        },
        {
            "binary_version": "10.05.0dfsg1-0ubuntu1.1",
            "binary_name": "libgs-common"
        },
        {
            "binary_version": "10.05.0dfsg1-0ubuntu1.1",
            "binary_name": "libgs-dev"
        },
        {
            "binary_version": "10.05.0dfsg1-0ubuntu1.1",
            "binary_name": "libgs10"
        },
        {
            "binary_version": "10.05.0dfsg1-0ubuntu1.1",
            "binary_name": "libgs10-common"
        },
        {
            "binary_version": "10.05.0dfsg1-0ubuntu1.1",
            "binary_name": "libgs10-dbgsym"
        }
    ],
    "availability": "No subscription required"
}