MGASA-2023-0290

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2023-0290.html

Import Source

https://advisories.mageia.org/MGASA-2023-0290.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2023-0290

Related

CVE-2023-43115

Published

2023-10-19T16:11:51Z

Modified

2023-10-19T14:41:34Z

Summary

Updated ghostscript packages fix security vulnerability

Details

The updated packages fix a security vulnerability:

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. (CVE-2023-43115)

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:8 / ghostscript

Package

Name: ghostscript
Purl: pkg:rpm/mageia/ghostscript?distro=mageia-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

9.53.3-2.7.mga8

Ecosystem specific

{
    "section": "core"
}

Mageia:9 / ghostscript

Package

Name: ghostscript
Purl: pkg:rpm/mageia/ghostscript?distro=mageia-9

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

10.00.0-6.3.mga9

Ecosystem specific

{
    "section": "core"
}