Описание
Security update for ghostscript
This update for ghostscript fixes the following issues:
- CVE-2024-29508: Fixed heap pointer leak in pdf_base_font_alloc (bsc#1227380)
Список пакетов
SUSE Linux Enterprise Server 12 SP5
ghostscript-9.52-23.83.1
ghostscript-devel-9.52-23.83.1
ghostscript-x11-9.52-23.83.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
ghostscript-9.52-23.83.1
ghostscript-devel-9.52-23.83.1
ghostscript-x11-9.52-23.83.1
SUSE Linux Enterprise Software Development Kit 12 SP5
ghostscript-devel-9.52-23.83.1
Ссылки
- Link for SUSE-SU-2024:2547-1
- E-Mail link for SUSE-SU-2024:2547-1
- SUSE Security Ratings
- SUSE Bug 1227380
- SUSE CVE CVE-2024-29508 page
Описание
Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:ghostscript-9.52-23.83.1
SUSE Linux Enterprise Server 12 SP5:ghostscript-devel-9.52-23.83.1
SUSE Linux Enterprise Server 12 SP5:ghostscript-x11-9.52-23.83.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:ghostscript-9.52-23.83.1
Ссылки
- CVE-2024-29508
- SUSE Bug 1227380