Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:1797-1

Опубликовано: 07 апр. 2023
Источник: suse-cvrf

Описание

Security update for ghostscript

This update for ghostscript fixes the following issues:

  • CVE-2023-28879: Fixed buffer Overflow in s_xBCPE_process (bsc#1210062).

Список пакетов

SUSE Linux Enterprise Server 12 SP2-BCL
ghostscript-9.52-23.51.1
ghostscript-devel-9.52-23.51.1
ghostscript-x11-9.52-23.51.1
SUSE Linux Enterprise Server 12 SP4-ESPOS
ghostscript-9.52-23.51.1
ghostscript-devel-9.52-23.51.1
ghostscript-x11-9.52-23.51.1
SUSE Linux Enterprise Server 12 SP4-LTSS
ghostscript-9.52-23.51.1
ghostscript-devel-9.52-23.51.1
ghostscript-x11-9.52-23.51.1
SUSE Linux Enterprise Server 12 SP5
ghostscript-9.52-23.51.1
ghostscript-devel-9.52-23.51.1
ghostscript-x11-9.52-23.51.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
ghostscript-9.52-23.51.1
ghostscript-devel-9.52-23.51.1
ghostscript-x11-9.52-23.51.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
ghostscript-9.52-23.51.1
ghostscript-devel-9.52-23.51.1
ghostscript-x11-9.52-23.51.1
SUSE Linux Enterprise Software Development Kit 12 SP5
ghostscript-devel-9.52-23.51.1
SUSE OpenStack Cloud 9
ghostscript-9.52-23.51.1
ghostscript-devel-9.52-23.51.1
ghostscript-x11-9.52-23.51.1
SUSE OpenStack Cloud Crowbar 9
ghostscript-9.52-23.51.1
ghostscript-devel-9.52-23.51.1
ghostscript-x11-9.52-23.51.1

Ссылки

Описание

In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled to one byte less than full, and one then tries to write an escaped character, two bytes are written.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP2-BCL:ghostscript-9.52-23.51.1
SUSE Linux Enterprise Server 12 SP2-BCL:ghostscript-devel-9.52-23.51.1
SUSE Linux Enterprise Server 12 SP2-BCL:ghostscript-x11-9.52-23.51.1
SUSE Linux Enterprise Server 12 SP4-ESPOS:ghostscript-9.52-23.51.1
Ссылки