SUSE-SU-2023:2844-1

UNKNOWN

Security update for ghostscript

Published Jul 17, 2023

Modified 2 years ago

Fix available

Details

This update for ghostscript fixes the following issues:

CVE-2023-36664: Fixed permission validation mishandling for pipe devices with the %pipe% prefix or the | pipe character prefix (bsc#1212711).

Affected Packages

ghostscript

SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP4-ESPOSSUSE Linux Enterprise Server 12 SP4-LTSSSUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4

Fixed in:

9.52-23.54.1

ghostscript-devel

Fixed in:

9.52-23.54.1

ghostscript-x11

Fixed in:

9.52-23.54.1

References

REPORT

https://bugzilla.suse.com/1212711

WEB

https://www.suse.com/security/cve/CVE-2023-36664

ADVISORY

https://www.suse.com/support/update/announcement/2023/suse-su-20232844-1/

Upstream

CVE-2023-36664

Ecosystems(9)

SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP4

Timeline

PublishedJul 17, 2023

ModifiedJul 17, 2023

SUSE-SU-2023:2844-1 | Mondoo Vulnerability Intelligence