SUSE-SU-2021:3044-1
Security update for ghostscript
Severity by source
No source gives a CVSS score.
Trivy's own label is CRITICAL. Rated critical by SUSE.
Description
This update for ghostscript fixes the following issues: Security issue fixed: - CVE-2021-3781: Fixed a trivial -dSAFER bypass command injection (bsc#1190381) Also a hardening fix was added: - Link as position independent executable (bsc#1184123)
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 15 | ghostscript, ghostscript-devel, ghostscript-x11 and 2 more | 9.52-155.1 and 1 more |
| SUSE Linux Enterprise 15.1 | ghostscript, ghostscript-devel, ghostscript-x11 and 2 more | 9.52-155.1 and 1 more |
| SUSE Linux Enterprise 15.2 | ghostscript, ghostscript-devel, ghostscript-x11 and 2 more | 9.52-155.1 and 1 more |
| SUSE Linux Enterprise 15.3 | ghostscript, ghostscript-devel, ghostscript-x11 and 2 more | 9.52-155.1 and 1 more |
Show all 20 entries from 4 sources
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 15 | ghostscript | 9.52-155.1 |
| SUSE Linux Enterprise 15 | ghostscript-devel | 9.52-155.1 |
| SUSE Linux Enterprise 15 | ghostscript-x11 | 9.52-155.1 |
| SUSE Linux Enterprise 15 | libspectre-devel | 0.2.8-3.12.1 |
| SUSE Linux Enterprise 15 | libspectre1 | 0.2.8-3.12.1 |
| SUSE Linux Enterprise 15.1 | ghostscript | 9.52-155.1 |
| SUSE Linux Enterprise 15.1 | ghostscript-devel | 9.52-155.1 |
| SUSE Linux Enterprise 15.1 | ghostscript-x11 | 9.52-155.1 |
| SUSE Linux Enterprise 15.1 | libspectre-devel | 0.2.8-3.12.1 |
| SUSE Linux Enterprise 15.1 | libspectre1 | 0.2.8-3.12.1 |
| SUSE Linux Enterprise 15.2 | ghostscript | 9.52-155.1 |
| SUSE Linux Enterprise 15.2 | ghostscript-devel | 9.52-155.1 |
| SUSE Linux Enterprise 15.2 | ghostscript-x11 | 9.52-155.1 |
| SUSE Linux Enterprise 15.2 | libspectre-devel | 0.2.8-3.12.1 |
| SUSE Linux Enterprise 15.2 | libspectre1 | 0.2.8-3.12.1 |
| SUSE Linux Enterprise 15.3 | ghostscript | 9.52-155.1 |
| SUSE Linux Enterprise 15.3 | ghostscript-devel | 9.52-155.1 |
| SUSE Linux Enterprise 15.3 | ghostscript-x11 | 9.52-155.1 |
| SUSE Linux Enterprise 15.3 | libspectre-devel | 0.2.8-3.12.1 |
| SUSE Linux Enterprise 15.3 | libspectre1 | 0.2.8-3.12.1 |
References
- https://bugzilla.suse.com/1184123
- https://bugzilla.suse.com/1190381
- https://lists.suse.com/pipermail/sle-security-updates/2021-September/009444.html
- https://www.suse.com/security/cve/CVE-2021-3781/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2021/suse-su-20213044-1/