Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:3938-1

Опубликовано: 03 окт. 2023
Источник: suse-cvrf

Описание

Security update for ghostscript

This update for ghostscript fixes the following issues:

  • CVE-2023-43115: Fixed remote code execution via crafted PostScript documents in gdevijs.c (b sc#1215466).

Список пакетов

SUSE Linux Enterprise Server 12 SP5
ghostscript-9.52-23.60.1
ghostscript-devel-9.52-23.60.1
ghostscript-x11-9.52-23.60.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
ghostscript-9.52-23.60.1
ghostscript-devel-9.52-23.60.1
ghostscript-x11-9.52-23.60.1
SUSE Linux Enterprise Software Development Kit 12 SP5
ghostscript-devel-9.52-23.60.1

Ссылки

Описание

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be specified on a gs command line (the IJS device inherently must execute a command to start the IJS server).

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:ghostscript-9.52-23.60.1
SUSE Linux Enterprise Server 12 SP5:ghostscript-devel-9.52-23.60.1
SUSE Linux Enterprise Server 12 SP5:ghostscript-x11-9.52-23.60.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:ghostscript-9.52-23.60.1
Ссылки