Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:2292-1

Опубликовано: 03 июл. 2024
Источник: suse-cvrf

Описание

Security update for ghostscript

This update for ghostscript fixes the following issues:

  • CVE-2024-29510: Fixed an arbitrary path traversal when running in a permitted path (bsc#1226945).
  • CVE-2024-33870: Fixed a format string injection that could lead to command execution (bsc#1226944).
  • CVE-2024-33869: Fixed a path validation bypass that could lead to path traversal (bsc#1226946).

Список пакетов

SUSE Enterprise Storage 7.1
ghostscript-9.52-150000.194.1
ghostscript-devel-9.52-150000.194.1
ghostscript-x11-9.52-150000.194.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS
ghostscript-9.52-150000.194.1
ghostscript-devel-9.52-150000.194.1
ghostscript-x11-9.52-150000.194.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
ghostscript-9.52-150000.194.1
ghostscript-devel-9.52-150000.194.1
ghostscript-x11-9.52-150000.194.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
ghostscript-9.52-150000.194.1
ghostscript-devel-9.52-150000.194.1
ghostscript-x11-9.52-150000.194.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
ghostscript-9.52-150000.194.1
ghostscript-devel-9.52-150000.194.1
ghostscript-x11-9.52-150000.194.1
SUSE Linux Enterprise Module for Basesystem 15 SP5
ghostscript-9.52-150000.194.1
ghostscript-devel-9.52-150000.194.1
ghostscript-x11-9.52-150000.194.1
SUSE Linux Enterprise Module for Basesystem 15 SP6
ghostscript-9.52-150000.194.1
ghostscript-devel-9.52-150000.194.1
ghostscript-x11-9.52-150000.194.1
SUSE Linux Enterprise Server 15 SP2-LTSS
ghostscript-9.52-150000.194.1
ghostscript-devel-9.52-150000.194.1
ghostscript-x11-9.52-150000.194.1
SUSE Linux Enterprise Server 15 SP3-LTSS
ghostscript-9.52-150000.194.1
ghostscript-devel-9.52-150000.194.1
ghostscript-x11-9.52-150000.194.1
SUSE Linux Enterprise Server 15 SP4-LTSS
ghostscript-9.52-150000.194.1
ghostscript-devel-9.52-150000.194.1
ghostscript-x11-9.52-150000.194.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2
ghostscript-9.52-150000.194.1
ghostscript-devel-9.52-150000.194.1
ghostscript-x11-9.52-150000.194.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3
ghostscript-9.52-150000.194.1
ghostscript-devel-9.52-150000.194.1
ghostscript-x11-9.52-150000.194.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
ghostscript-9.52-150000.194.1
ghostscript-devel-9.52-150000.194.1
ghostscript-x11-9.52-150000.194.1
SUSE Manager Proxy 4.3
ghostscript-9.52-150000.194.1
ghostscript-devel-9.52-150000.194.1
ghostscript-x11-9.52-150000.194.1
SUSE Manager Server 4.3
ghostscript-9.52-150000.194.1
ghostscript-devel-9.52-150000.194.1
ghostscript-x11-9.52-150000.194.1
openSUSE Leap 15.5
ghostscript-9.52-150000.194.1
ghostscript-devel-9.52-150000.194.1
ghostscript-x11-9.52-150000.194.1
openSUSE Leap 15.6
ghostscript-9.52-150000.194.1
ghostscript-devel-9.52-150000.194.1
ghostscript-x11-9.52-150000.194.1

Ссылки

Описание

Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.

Затронутые продукты
SUSE Enterprise Storage 7.1:ghostscript-9.52-150000.194.1
SUSE Enterprise Storage 7.1:ghostscript-devel-9.52-150000.194.1
SUSE Enterprise Storage 7.1:ghostscript-x11-9.52-150000.194.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ghostscript-9.52-150000.194.1
Ссылки

Описание

An issue was discovered in Artifex Ghostscript before 10.03.1. Path traversal and command execution can occur (via a crafted PostScript document) because of path reduction in base/gpmisc.c. For example, restrictions on use of %pipe% can be bypassed via the aa/../%pipe%command# output filename.

Затронутые продукты
SUSE Enterprise Storage 7.1:ghostscript-9.52-150000.194.1
SUSE Enterprise Storage 7.1:ghostscript-devel-9.52-150000.194.1
SUSE Enterprise Storage 7.1:ghostscript-x11-9.52-150000.194.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ghostscript-9.52-150000.194.1
Ссылки

Описание

An issue was discovered in Artifex Ghostscript before 10.03.1. There is path traversal (via a crafted PostScript document) to arbitrary files if the current directory is in the permitted paths. For example, there can be a transformation of ../../foo to ./../../foo and this will grant access if ./ is permitted.

Затронутые продукты
SUSE Enterprise Storage 7.1:ghostscript-9.52-150000.194.1
SUSE Enterprise Storage 7.1:ghostscript-devel-9.52-150000.194.1
SUSE Enterprise Storage 7.1:ghostscript-x11-9.52-150000.194.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ghostscript-9.52-150000.194.1
Ссылки