FEDORA-2024-52192927d8 — security update for ghostscript

stable

ghostscript-10.02.1-7.fc39

FEDORA-2024-52192927d8 created by zdohnal a year ago for Fedora 39

Security fix for CVE-2024-33869

Security fixes for CVE-2024-29509, CVE-2024-29508, CVE-2024-29507, CVE-2024-29506

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2024-52192927d8

This update has been submitted for testing by zdohnal.

a year ago

This update's test gating status has been changed to 'waiting'.

a year ago

This update has obsoleted ghostscript-10.02.1-6.fc39, and has inherited its bugs and notes.

a year ago

This update's test gating status has been changed to 'waiting'.

a year ago

This update's test gating status has been changed to 'passed'.

a year ago

This update has been pushed to testing.

a year ago

geraldosimiao provided feedback a year ago

karma

filiperosset commented & provided feedback a year ago

karma

no regressions noted

This update can be pushed to stable now if the maintainer wishes

a year ago

This update has been submitted for stable by zdohnal.

a year ago

This update has been pushed to stable.

a year ago

Please log in to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

a year ago

in testing

a year ago

in stable

a year ago

Builds

ghostscript-10.02.1-7.fc39

BZ#2293958 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction

BZ#2295626 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter()

BZ#2295627 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc()

BZ#2295628 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter

BZ#2295647 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters

BZ#2295697 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter() [fedora-all]

BZ#2295700 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters [fedora-all]

BZ#2295703 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc() [fedora-all]

BZ#2295704 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter [fedora-all]

BZ#2296285 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction [fedora-all]

ghostscript-10.02.1-7.fc39

Automated Test Results

passed