Most recent entries from all

ALSA-2024:6197 — Moderate: ghostscript security update

Affected: AlmaLinux:9: ghostscript, AlmaLinux:9: ghostscript-doc, AlmaLinux:9: ghostscript-tools-dvipdf, AlmaLinux:9: ghostscript-tools-fonts, AlmaLinux:9: ghostscript-tools-printing, AlmaLinux:9: ghostscript-x11, AlmaLinux:9: libgs, AlmaLinux:9: libgs-devel

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* ghostscript: format string injection leads to shell command execution (SAFER bypass) (CVE-2024-29510) * ghostscript: path traversal and command execution due to path reduction (CVE-2024-33869) * ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths (CVE-2024-33870)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2024-05062

BELL-CVE-2024-29510

Affected: Alpaquita:23: ghostscript, Alpaquita:stream: ghostscript

EUVD-2026-158989

fkie_cve-2024-29510

Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.

GHSA-r824-gq56-gjgx

Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.

gsd-2024-29510

OESA-2024-2159 — ghostscript security update

Affected: openEuler:22.03-LTS-SP1: ghostscript

Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fix(es): Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc.(CVE-2024-29508) Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.(CVE-2024-29510)

openSUSE-SU-2024:14090-1 — ghostscript-10.03.1-1.1 on GA media

ghostscript-10.03.1-1.1 on GA media

RHSA-2024:6466 — Red Hat Security Advisory: ghostscript security update

ghostscript: format string injection leads to shell command execution (SAFER bypass) ghostscript: path traversal and command execution due to path reduction ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths

SUSE-SU-2024:2276-1 — Security update for ghostscript

Security update for ghostscript

UBUNTU-CVE-2024-29510

Affected: Ubuntu:20.04:LTS: ghostscript, Ubuntu:22.04:LTS: ghostscript, Ubuntu:24.04:LTS: ghostscript

Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.

WID-SEC-W-2024-1444 — Ghostscript: Mehrere Schwachstellen

Ein entfernter anonymer oder ein lokaler Angreifer kann mehrere Schwachstellen in Ghostscript ausnutzen, um Informationen offenzulegen oder beliebigen Code auszuführen.