Oval Definition:oval:org.opensuse.security:def:69732
Revision Date:2021-09-15Version:1
Title:Security update for ghostscript (Critical)
Description:

This update for ghostscript fixes the following issues:

Security issue fixed:

- CVE-2021-3781: Fixed a trivial -dSAFER bypass command injection (bsc#1190381)

Also a hardening fix was added:

- Link as position independent executable (bsc#1184123)
Family:unixClass:patch
Status:Reference(s):1184123
1190381
CVE-2015-1545
CVE-2015-1546
CVE-2015-3294
CVE-2015-6908
CVE-2015-8899
CVE-2017-14491
CVE-2017-14492
CVE-2017-14493
CVE-2017-14494
CVE-2017-14495
CVE-2017-14496
CVE-2017-15107
CVE-2017-17740
CVE-2019-13057
CVE-2019-13565
CVE-2019-14834
CVE-2020-12243
CVE-2021-3781
SUSE-SU-2021:3044-1
Platform(s):SUSE Linux Enterprise Module for Basesystem 15 SP2
SUSE Linux Enterprise Server 15 SP1-BCL
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed
  • AND dnsmasq-2.78-7.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 15 SP1-BCL is installed
  • AND Package Information
  • ghostscript-9.52-155.1 is installed
  • OR ghostscript-devel-9.52-155.1 is installed
  • OR ghostscript-x11-9.52-155.1 is installed
  • OR libspectre-devel-0.2.8-3.12.1 is installed
  • OR libspectre1-0.2.8-3.12.1 is installed
    • BACK