[ol10_appstream] libgs-10.02.1-16.el10_0.x86_64

Name:	libgs
Version:	10.02.1
Release:	16.el10_0
Architecture:	x86_64
Group:	Unspecified
Size:	24333470
License:	AGPL-3.0-or-later
RPM:	libgs-10.02.1-16.el10_0.x86_64.rpm
Source RPM:	ghostscript-10.02.1-16.el10_0.src.rpm
Build Date:	Thu Jun 26 2025
Build Host:	build-ol10-x86_64.oracle.com
Vendor:	Oracle America
URL:	https://ghostscript.com/
Summary:	Library providing Ghostcript's core functionality
Description:	This library provides Ghostscript's core functionality, based on Ghostscript's API, which is useful for many packages that are build on top of Ghostscript. It also provides an X11-based driver for Ghostscript, which enables displaying of various document files (including PS and PDF).

Changelog (Show File list) (Show related packages)

Wed May 07 2025 Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-16

- RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow

Tue Apr 15 2025 Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-15

- RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
- RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling
- RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
- RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
- RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution

Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 10.02.1-14

- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

Wed Jul 17 2024 Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-13

- RHEL-46575 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction

Tue Jul 16 2024 Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-12

- RHEL-46149 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter
- RHEL-46131 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc()
- RHEL-46112 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters
- RHEL-46076 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter()
- RHEL-44727 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)

Thu Jul 11 2024 Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-12

- RHEL-44771 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths

Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com> - 10.02.1-11
```
- Bump release for June 2024 mass rebuild
```
Fri Jun 21 2024 Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-10
```
- RHEL-38835 run the package with correct tests
```

Thu Jun 20 2024 Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-9

- RHEL-38835 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library

Wed Jan 24 2024 Fedora Release Engineering <releng@fedoraproject.org> - 10.02.1-8
```
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
```