SUSE-SU-2021:3044-1
Security update for ghostscript
Sévérité par source
Aucune source ne donne de score CVSS.
Le label propre à Trivy est CRITICAL. Critique selon SUSE.
Description
This update for ghostscript fixes the following issues: Security issue fixed: - CVE-2021-3781: Fixed a trivial -dSAFER bypass command injection (bsc#1190381) Also a hardening fix was added: - Link as position independent executable (bsc#1184123)
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| SUSE Linux Enterprise 15 | ghostscript, ghostscript-devel, ghostscript-x11 et 2 autres | 9.52-155.1 et 1 autres |
| SUSE Linux Enterprise 15.1 | ghostscript, ghostscript-devel, ghostscript-x11 et 2 autres | 9.52-155.1 et 1 autres |
| SUSE Linux Enterprise 15.2 | ghostscript, ghostscript-devel, ghostscript-x11 et 2 autres | 9.52-155.1 et 1 autres |
| SUSE Linux Enterprise 15.3 | ghostscript, ghostscript-devel, ghostscript-x11 et 2 autres | 9.52-155.1 et 1 autres |
Afficher les 20 entrées de 4 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| SUSE Linux Enterprise 15 | ghostscript | 9.52-155.1 |
| SUSE Linux Enterprise 15 | ghostscript-devel | 9.52-155.1 |
| SUSE Linux Enterprise 15 | ghostscript-x11 | 9.52-155.1 |
| SUSE Linux Enterprise 15 | libspectre-devel | 0.2.8-3.12.1 |
| SUSE Linux Enterprise 15 | libspectre1 | 0.2.8-3.12.1 |
| SUSE Linux Enterprise 15.1 | ghostscript | 9.52-155.1 |
| SUSE Linux Enterprise 15.1 | ghostscript-devel | 9.52-155.1 |
| SUSE Linux Enterprise 15.1 | ghostscript-x11 | 9.52-155.1 |
| SUSE Linux Enterprise 15.1 | libspectre-devel | 0.2.8-3.12.1 |
| SUSE Linux Enterprise 15.1 | libspectre1 | 0.2.8-3.12.1 |
| SUSE Linux Enterprise 15.2 | ghostscript | 9.52-155.1 |
| SUSE Linux Enterprise 15.2 | ghostscript-devel | 9.52-155.1 |
| SUSE Linux Enterprise 15.2 | ghostscript-x11 | 9.52-155.1 |
| SUSE Linux Enterprise 15.2 | libspectre-devel | 0.2.8-3.12.1 |
| SUSE Linux Enterprise 15.2 | libspectre1 | 0.2.8-3.12.1 |
| SUSE Linux Enterprise 15.3 | ghostscript | 9.52-155.1 |
| SUSE Linux Enterprise 15.3 | ghostscript-devel | 9.52-155.1 |
| SUSE Linux Enterprise 15.3 | ghostscript-x11 | 9.52-155.1 |
| SUSE Linux Enterprise 15.3 | libspectre-devel | 0.2.8-3.12.1 |
| SUSE Linux Enterprise 15.3 | libspectre1 | 0.2.8-3.12.1 |
Références
- https://bugzilla.suse.com/1184123
- https://bugzilla.suse.com/1190381
- https://lists.suse.com/pipermail/sle-security-updates/2021-September/009444.html
- https://www.suse.com/security/cve/CVE-2021-3781/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2021/suse-su-20213044-1/