Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:2547-1

Опубликовано: 17 июл. 2024
Источник: suse-cvrf

Описание

Security update for ghostscript

This update for ghostscript fixes the following issues:

  • CVE-2024-29508: Fixed heap pointer leak in pdf_base_font_alloc (bsc#1227380)

Список пакетов

SUSE Linux Enterprise Server 12 SP5
ghostscript-9.52-23.83.1
ghostscript-devel-9.52-23.83.1
ghostscript-x11-9.52-23.83.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
ghostscript-9.52-23.83.1
ghostscript-devel-9.52-23.83.1
ghostscript-x11-9.52-23.83.1
SUSE Linux Enterprise Software Development Kit 12 SP5
ghostscript-devel-9.52-23.83.1

Описание

Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc.


Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:ghostscript-9.52-23.83.1
SUSE Linux Enterprise Server 12 SP5:ghostscript-devel-9.52-23.83.1
SUSE Linux Enterprise Server 12 SP5:ghostscript-x11-9.52-23.83.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:ghostscript-9.52-23.83.1

Ссылки