Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:2627-1

Опубликовано: 30 июл. 2024
Источник: suse-cvrf

Описание

Security update for ghostscript

This update for ghostscript fixes the following issues:

  • CVE-2024-29508: Fixed heap pointer leak in pdf_base_font_alloc (bsc#1227380)

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP5
ghostscript-9.52-150000.197.1
ghostscript-devel-9.52-150000.197.1
ghostscript-x11-9.52-150000.197.1
SUSE Linux Enterprise Module for Basesystem 15 SP6
ghostscript-9.52-150000.197.1
ghostscript-devel-9.52-150000.197.1
ghostscript-x11-9.52-150000.197.1
openSUSE Leap 15.5
ghostscript-9.52-150000.197.1
ghostscript-devel-9.52-150000.197.1
ghostscript-x11-9.52-150000.197.1
openSUSE Leap 15.6
ghostscript-9.52-150000.197.1
ghostscript-devel-9.52-150000.197.1
ghostscript-x11-9.52-150000.197.1

Ссылки

Описание

Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP5:ghostscript-9.52-150000.197.1
SUSE Linux Enterprise Module for Basesystem 15 SP5:ghostscript-devel-9.52-150000.197.1
SUSE Linux Enterprise Module for Basesystem 15 SP5:ghostscript-x11-9.52-150000.197.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:ghostscript-9.52-150000.197.1
Ссылки