Bug 14168

Summary: [CVE 21] ghostscript 9.54.0
Product: [ROSA-based products] ROSA Fresh Reporter: Vladimir Potapov <v.potapov>
Component: Packages from MainAssignee: ROSA Linux Bugs <bugs>
Status: VERIFIED FIXED QA Contact: ROSA Linux Bugs <bugs>
Severity: blocker    
Priority: Highest CC: a.proklov, s.matveev
Version: AllFlags: v.potapov: qa_verified+
v.potapov: secteam_verified?
a.proklov: published+
Target Milestone: 2021.1 Fresh R12   
Hardware: All   
OS: Linux   
URL: CVE-2023-46751,CVE-2023-43115
Whiteboard:
Platform: 2021.1 ROSA Vulnerability identifier:
RPM Package: ISO-related:
Bad POT generating: Upstream:

Description Vladimir Potapov 2023-12-21 16:37:09 MSK
https://nvd.nist.gov/vuln/detail/CVE-2023-43115 critical!
Comment 1 Vladimir Potapov 2023-12-21 16:38:26 MSK
https://nvd.nist.gov/vuln/detail/CVE-2023-46751 high!
Comment 2 Vladimir Potapov 2023-12-29 10:26:40 MSK
крит в дебиане исправили
https://security-tracker.debian.org/tracker/CVE-2023-43115
Comment 3 Svyatoslav Matveev 2024-01-10 18:41:57 MSK
********** QA ADVISORY **********

CVE-2023-43115 закрыто наложением патча.

CVE-2023-46751 не подходит к этой версии,
код для исправления появляется в версии 9.55.0.

Ссылка на исправление:
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=dcdbc595c13c9d11d235702dff46bb74c80f7698


*** ghostscript
**  9.54.0 release +1

https://abf.io/build_lists/4952291 (x86_64)
https://abf.io/build_lists/4952292
https://abf.io/build_lists/4952293
https://abf.io/build_lists/4952294
https://abf.io/build_lists/4952295

**** rosa2021.15
*** ghostscript
**  9.54.0 release +1

https://abf.io/build_lists/4952296
https://abf.io/build_lists/4952297
https://abf.io/build_lists/4952298
Comment 4 Vladimir Potapov 2024-01-15 08:57:03 MSK
(In reply to Svyatoslav Matveev from comment #3)
> ********** QA ADVISORY **********
> 
> CVE-2023-43115 закрыто наложением патча.
> 
> CVE-2023-46751 не подходит к этой версии,
> код для исправления появляется в версии 9.55.0.
> 
> Ссылка на исправление:
> https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;
> h=dcdbc595c13c9d11d235702dff46bb74c80f7698
> 
> 
> *** ghostscript
> **  9.54.0 release +1
> 
> https://abf.io/build_lists/4952291 (x86_64)
> https://abf.io/build_lists/4952292
> https://abf.io/build_lists/4952293
> https://abf.io/build_lists/4952294
> https://abf.io/build_lists/4952295
*********************************************
The update sent to testings


> **** rosa2021.15
> *** ghostscript
> **  9.54.0 release +1
> 
> https://abf.io/build_lists/4952296
> https://abf.io/build_lists/4952297
> https://abf.io/build_lists/4952298
*******************************************
Published
Comment 5 Vladimir Potapov 2024-01-23 10:29:20 MSK
ghostscript-9.54.0-10
https://abf.io/build_lists/4952291 (x86_64)
https://abf.io/build_lists/4952292
https://abf.io/build_lists/4952293
https://abf.io/build_lists/4952294
https://abf.io/build_lists/4952295
*********************************** Advisory *************************
CVE-2023-43115 fixed via patch
**********************************************************************
QA Verified