Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2021:3044-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2021:3044-1

UNKNOWN

Security update for ghostscript

Published Sep 15, 2021

Modified 4 years ago

Fix available

Details

This update for ghostscript fixes the following issues:

Security issue fixed:

CVE-2021-3781: Fixed a trivial -dSAFER bypass command injection (bsc#1190381)

Also a hardening fix was added:

Link as position independent executable (bsc#1184123)

Affected Packages

SUSE:Enterprise Storage 6ghostscript

Fixed in:

9.52-155.1

SUSE:Enterprise Storage 6ghostscript-devel

Fixed in:

9.52-155.1

SUSE:Enterprise Storage 6ghostscript-x11

Fixed in:

9.52-155.1

SUSE:Enterprise Storage 6libspectre

Fixed in:

0.2.8-3.12.1

SUSE:Enterprise Storage 6libspectre-devel

Fixed in:

0.2.8-3.12.1

SUSE:Enterprise Storage 6libspectre1

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOSghostscript

Fixed in:

9.52-155.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOSghostscript-devel

Fixed in:

9.52-155.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOSghostscript-x11

Fixed in:

9.52-155.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOSlibspectre

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOSlibspectre-devel

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOSlibspectre1

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSghostscript

Fixed in:

9.52-155.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSghostscript-devel

Fixed in:

9.52-155.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSghostscript-x11

Fixed in:

9.52-155.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSlibspectre

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSlibspectre-devel

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSlibspectre1

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise High Performance Computing 15-ESPOSghostscript

Fixed in:

9.52-155.1

SUSE:Linux Enterprise High Performance Computing 15-ESPOSghostscript-devel

Fixed in:

9.52-155.1

SUSE:Linux Enterprise High Performance Computing 15-ESPOSghostscript-x11

Fixed in:

9.52-155.1

SUSE:Linux Enterprise High Performance Computing 15-ESPOSlibspectre

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise High Performance Computing 15-ESPOSlibspectre-devel

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise High Performance Computing 15-ESPOSlibspectre1

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise High Performance Computing 15-LTSSghostscript

Fixed in:

9.52-155.1

SUSE:Linux Enterprise High Performance Computing 15-LTSSghostscript-devel

Fixed in:

9.52-155.1

SUSE:Linux Enterprise High Performance Computing 15-LTSSghostscript-x11

Fixed in:

9.52-155.1

SUSE:Linux Enterprise High Performance Computing 15-LTSSlibspectre

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise High Performance Computing 15-LTSSlibspectre-devel

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise High Performance Computing 15-LTSSlibspectre1

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise Module for Basesystem 15 SP2ghostscript

Fixed in:

9.52-155.1

SUSE:Linux Enterprise Module for Basesystem 15 SP2ghostscript-devel

Fixed in:

9.52-155.1

SUSE:Linux Enterprise Module for Basesystem 15 SP2ghostscript-x11

Fixed in:

9.52-155.1

SUSE:Linux Enterprise Module for Basesystem 15 SP3ghostscript

Fixed in:

9.52-155.1

SUSE:Linux Enterprise Module for Basesystem 15 SP3ghostscript-devel

Fixed in:

9.52-155.1

SUSE:Linux Enterprise Module for Basesystem 15 SP3ghostscript-x11

Fixed in:

9.52-155.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP2libspectre

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP2libspectre-devel

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP2libspectre1

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP3libspectre

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP3libspectre-devel

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP3libspectre1

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise Server 15 SP1-BCLghostscript

Fixed in:

9.52-155.1

SUSE:Linux Enterprise Server 15 SP1-BCLghostscript-devel

Fixed in:

9.52-155.1

SUSE:Linux Enterprise Server 15 SP1-BCLghostscript-x11

Fixed in:

9.52-155.1

SUSE:Linux Enterprise Server 15 SP1-BCLlibspectre

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise Server 15 SP1-BCLlibspectre-devel

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise Server 15 SP1-BCLlibspectre1

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise Server 15 SP1-LTSSghostscript

Fixed in:

9.52-155.1

SUSE:Linux Enterprise Server 15 SP1-LTSSghostscript-devel

Fixed in:

9.52-155.1

SUSE:Linux Enterprise Server 15 SP1-LTSSghostscript-x11

Fixed in:

9.52-155.1

SUSE:Linux Enterprise Server 15 SP1-LTSSlibspectre

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise Server 15 SP1-LTSSlibspectre-devel

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise Server 15 SP1-LTSSlibspectre1

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise Server 15-LTSSghostscript

Fixed in:

9.52-155.1

SUSE:Linux Enterprise Server 15-LTSSghostscript-devel

Fixed in:

9.52-155.1

SUSE:Linux Enterprise Server 15-LTSSghostscript-x11

Fixed in:

9.52-155.1

SUSE:Linux Enterprise Server 15-LTSSlibspectre

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise Server 15-LTSSlibspectre-devel

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise Server 15-LTSSlibspectre1

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise Server for SAP Applications 15ghostscript

Fixed in:

9.52-155.1

SUSE:Linux Enterprise Server for SAP Applications 15ghostscript-devel

Fixed in:

9.52-155.1

SUSE:Linux Enterprise Server for SAP Applications 15ghostscript-x11

Fixed in:

9.52-155.1

SUSE:Linux Enterprise Server for SAP Applications 15libspectre

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise Server for SAP Applications 15libspectre-devel

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise Server for SAP Applications 15libspectre1

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1ghostscript

Fixed in:

9.52-155.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1ghostscript-devel

Fixed in:

9.52-155.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1ghostscript-x11

Fixed in:

9.52-155.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1libspectre

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1libspectre-devel

Fixed in:

0.2.8-3.12.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1libspectre1

Fixed in:

0.2.8-3.12.1

SUSE:Manager Proxy 4.0ghostscript

Fixed in:

9.52-155.1

SUSE:Manager Proxy 4.0ghostscript-devel

Fixed in:

9.52-155.1

SUSE:Manager Proxy 4.0ghostscript-x11

Fixed in:

9.52-155.1

SUSE:Manager Proxy 4.0libspectre

Fixed in:

0.2.8-3.12.1

SUSE:Manager Proxy 4.0libspectre-devel

Fixed in:

0.2.8-3.12.1

SUSE:Manager Proxy 4.0libspectre1

Fixed in:

0.2.8-3.12.1

SUSE:Manager Retail Branch Server 4.0ghostscript

Fixed in:

9.52-155.1

SUSE:Manager Retail Branch Server 4.0ghostscript-devel

Fixed in:

9.52-155.1

SUSE:Manager Retail Branch Server 4.0ghostscript-x11

Fixed in:

9.52-155.1

SUSE:Manager Retail Branch Server 4.0libspectre

Fixed in:

0.2.8-3.12.1

SUSE:Manager Retail Branch Server 4.0libspectre-devel

Fixed in:

0.2.8-3.12.1

SUSE:Manager Retail Branch Server 4.0libspectre1

Fixed in:

0.2.8-3.12.1

SUSE:Manager Server 4.0ghostscript

Fixed in:

9.52-155.1

SUSE:Manager Server 4.0ghostscript-devel

Fixed in:

9.52-155.1

SUSE:Manager Server 4.0ghostscript-x11

Fixed in:

9.52-155.1

SUSE:Manager Server 4.0libspectre

Fixed in:

0.2.8-3.12.1

SUSE:Manager Server 4.0libspectre-devel

Fixed in:

0.2.8-3.12.1

SUSE:Manager Server 4.0libspectre1

Fixed in:

0.2.8-3.12.1

References

REPORThttps://bugzilla.suse.com/1184123 REPORThttps://bugzilla.suse.com/1190381 WEBhttps://www.suse.com/security/cve/CVE-2021-3781 ADVISORYhttps://www.suse.com/support/update/announcement/2021/suse-su-20213044-1/

Upstream

CVE-2021-3781

Ecosystems

Timeline

PublishedSep 15, 2021

ModifiedSep 15, 2021

SUSE-SU-2021:3044-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline