[ol9_appstream] libgs-9.54.0-18.el9_6.aarch64

This library provides Ghostscript's core functionality, based on Ghostscript's
API, which is useful for many packages that are build on top of Ghostscript.

Changelog (Show File list) (Show related packages)

• Tue Apr 15 2025 Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-18

  - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable()
  - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution

• Mon Jul 08 2024 Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-17

  - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
  - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
  - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)

• Thu Jun 20 2024 Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-16

  - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library

• Fri Oct 27 2023 Richard Lescak <rlescak@redhat.com> - 9.54.0-14

  - fix for CVE-2023-43115
  - Resolves: RHEL-10185

• Fri Aug 04 2023 Richard Lescak <rlescak@redhat.com> - 9.54.0-13

  - fix for CVE-2023-38559
  - Resolves: rhbz#2224372

• Tue Aug 01 2023 Richard Lescak <rlescak@redhat.com> - 9.54.0-12

  - fix for CVE-2023-36664
  - Resolves: rhbz#2217810

• Fri May 05 2023 Richard Lescak <rlescak@redhat.com> - 9.54.0-11

  - fix for CVE-2023-28879
  - Resolves: rhbz#2188300