Ghostscript versions of TW and Leap because of CVE-2023-3664
Following CVE-2023-3664, 10.1.2 is needed because of a now published exploit, is this corresponding to our package numbering? I am getting entropy@localhost:~> sudo gs --version 9.56.1
On Thu, Jul 13, 2023 at 11:55:17AM +0200, Stakanov wrote:
Following CVE-2023-3664, 10.1.2 is needed because of a now published exploit, is this corresponding to our package numbering? I am getting entropy@localhost:~> sudo gs --version 9.56.1
please use the correct CVE which is CVE-2023-36664. https://www.suse.com/security/cve/CVE-2023-36664.html tumblweed has received updated packages already, Leap annd SLES is in QA. Ciao, Marcus
In data giovedì 13 luglio 2023 12:04:29 CEST, Marcus Meissner ha scritto:
On Thu, Jul 13, 2023 at 11:55:17AM +0200, Stakanov wrote:
Following CVE-2023-3664, 10.1.2 is needed because of a now published exploit, is this corresponding to our package numbering? I am getting entropy@localhost:~> sudo gs --version 9.56.1
please use the correct CVE which is CVE-2023-36664.
https://www.suse.com/security/cve/CVE-2023-36664.html
tumblweed has received updated packages already, Leap annd SLES is in QA.
Ciao, Marcus Sorry, was from the press, (Golem).
Question, are they "in build" or should they already be in my repos, because I looked before I did write and I got only the version 9.56.1 available, as of above for TW. If they are currently building then this is O.K, if not I will have to check my repos if something is wrong.
On Thu, Jul 13, 2023 at 12:11:35PM +0200, Stakanov wrote:
In data giovedì 13 luglio 2023 12:04:29 CEST, Marcus Meissner ha scritto:
On Thu, Jul 13, 2023 at 11:55:17AM +0200, Stakanov wrote:
Following CVE-2023-3664, 10.1.2 is needed because of a now published exploit, is this corresponding to our package numbering? I am getting entropy@localhost:~> sudo gs --version 9.56.1
please use the correct CVE which is CVE-2023-36664.
https://www.suse.com/security/cve/CVE-2023-36664.html
tumblweed has received updated packages already, Leap annd SLES is in QA.
Ciao, Marcus Sorry, was from the press, (Golem).
Question, are they "in build" or should they already be in my repos, because I looked before I did write and I got only the version 9.56.1 available, as of above for TW.
If they are currently building then this is O.K, if not I will have to check my repos if something is wrong.
ghostscript 9.56.1-4.1 is the fixed tumbleweed version and should be available. For the rest it is not yet available, but in QA. Ciao, Marcus
participants (2)
-
Marcus Meissner -
Stakanov