gpp_maybe Security update for ghostscript

SUSE-SLE-SERVER-12-SP5-2024-2276

This update for ghostscript fixes the following issues: - CVE-2024-29510: Fixed an arbitrary path traversal when running in a permitted path (bsc#1226945). - CVE-2024-33870: Fixed a format string injection that could lead to command execution (bsc#1226944). - CVE-2024-33869: Fixed a path validation bypass that could lead to path traversal (bsc#1226946).

• Release Date
  Jul 2 2024
• References
  Bugzilla: 1226945, 1226944, 1226946
  CVEs: CVE-2024-29510, CVE-2024-33869, CVE-2024-33870
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server 12.5 aarch64

• Packages
  ghostscript
  The Ghostscript interpreter for PostScript and PDF

  9.52-23.80.1

  lock rpm

  lock src

  ghostscript-devel
  Development files for Ghostscript

  9.52-23.80.1

  lock rpm

  ghostscript-x11
  X11 library for Ghostscript

  9.52-23.80.1

  lock rpm

SUSE Linux Enterprise Server 12.5 ppc64le

• Packages
  ghostscript
  The Ghostscript interpreter for PostScript and PDF

  9.52-23.80.1

  lock rpm

  lock src

  ghostscript-devel
  Development files for Ghostscript

  9.52-23.80.1

  lock rpm

  ghostscript-x11
  X11 library for Ghostscript

  9.52-23.80.1

  lock rpm

SUSE Linux Enterprise Server 12.5 s390x

• Packages
  ghostscript
  The Ghostscript interpreter for PostScript and PDF

  9.52-23.80.1

  lock rpm

  lock src

  ghostscript-devel
  Development files for Ghostscript

  9.52-23.80.1

  lock rpm

  ghostscript-x11
  X11 library for Ghostscript

  9.52-23.80.1

  lock rpm

SUSE Linux Enterprise Server 12.5 x86_64

• Packages
  ghostscript
  The Ghostscript interpreter for PostScript and PDF

  9.52-23.80.1

  lock rpm

  lock src

  ghostscript-devel
  Development files for Ghostscript

  9.52-23.80.1

  lock rpm

  ghostscript-x11
  X11 library for Ghostscript

  9.52-23.80.1

  lock rpm