SUSE-SU-2023:3984-1: Security update for ghostscript
This update for ghostscript fixes the following issues: CVE-2023-43115: Fixed remote code execution via crafted PostScript documents in gdevijs.c (bsc#1215466).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/ghostscript-x11to a version that resolves this vulnerability.Fixed in 9.52-150000.173.2 - Upgrade
Upgrade
suse/ghostscript-debuginfoto a version that resolves this vulnerability.Fixed in 9.52-150000.173.2 - Upgrade
Upgrade
suse/ghostscript-develto a version that resolves this vulnerability.Fixed in 9.52-150000.173.2 - Upgrade
Upgrade
suse/ghostscript-x11-debuginfoto a version that resolves this vulnerability.Fixed in 9.52-150000.173.2 - Upgrade
Upgrade
suse/ghostscript-debugsourceto a version that resolves this vulnerability.Fixed in 9.52-150000.173.2 - Upgrade
Upgrade
suse/ghostscriptto a version that resolves this vulnerability.Fixed in 9.52-150000.173.2 - Upgrade
Upgrade
Basesystem Module 15-SP4to a version that resolves this vulnerability.Patch SUSE-SLE-Module-Basesystem-15-SP4-2023-3984=1 - Upgrade
Upgrade
Basesystem Module 15-SP5to a version that resolves this vulnerability.Patch SUSE-SLE-Module-Basesystem-15-SP5-2023-3984=1 - Upgrade
Upgrade
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSSto a version that resolves this vulnerability.Patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-3984=1 - Upgrade
Upgrade
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSSto a version that resolves this vulnerability.Patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-3984=1 - Upgrade
Upgrade
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3to a version that resolves this vulnerability.Patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-3984=1 - Upgrade
Upgrade
SUSE Linux Enterprise High Performance Computing LTSS 15 SP3to a version that resolves this vulnerability.Patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-3984=1 - Upgrade
Upgrade
SUSE Linux Enterprise Server 15 SP1 LTSSto a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-3984=1 - Upgrade
Upgrade
SUSE Linux Enterprise Server 15 SP2 LTSSto a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-3984=1 - Upgrade
Upgrade
SUSE Linux Enterprise Server 15 SP3 LTSSto a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-3984=1 - Upgrade
Upgrade
SUSE Linux Enterprise Server for SAP Applications 15 SP1to a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-3984=1 - Upgrade
Upgrade
SUSE Linux Enterprise Server for SAP Applications 15 SP2to a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-3984=1 - Upgrade
Upgrade
SUSE Linux Enterprise Server for SAP Applications 15 SP3to a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-3984=1 - Upgrade
Upgrade
SUSE Manager Proxy 4.2to a version that resolves this vulnerability.Patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-3984=1 - Upgrade
Upgrade
SUSE Manager Retail Branch Server 4.2to a version that resolves this vulnerability.Patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2023-3984=1 - Upgrade
Upgrade
SUSE Manager Server 4.2to a version that resolves this vulnerability.Patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-3984=1 - Upgrade
Upgrade
SUSE Enterprise Storage 7.1to a version that resolves this vulnerability.Patch SUSE-Storage-7.1-2023-3984=1 - Upgrade
Upgrade
openSUSE Leap 15.4to a version that resolves this vulnerability.Patch openSUSE-SLE-15.4-2023-3984=1 - Upgrade
Upgrade
openSUSE Leap 15.5to a version that resolves this vulnerability.Patch openSUSE-SLE-15.5-2023-3984=1