{"id":"CLSA-2026-1787916987","summary":"Fix CVE(s): CVE-2024-33871, CVE-2024-46951, CVE-2024-46953, CVE-2024-46956","details":"   * SECURITY UPDATE: arbitrary code execution via the opvp Driver parameter\n     - debian/patches/CVE-2024-33871.patch: refuse a Driver change once\n       LockSafetyParams is set, and report the Driver length without the\n       trailing NUL, in contrib/opvp/gdevopvp.c.\n     - CVE-2024-33871\n   * SECURITY UPDATE: unchecked Implementation pointer in Pattern colour space\n     - debian/patches/CVE-2024-46951.patch: check that the Pattern\n       Implementation object really is a pattern instance before dereferencing\n       it in patterncomponent() in psi/zcolor.c.\n     - CVE-2024-46951\n   * SECURITY UPDATE: integer overflow validating the output filename format\n     - debian/patches/CVE-2024-46953.patch: reject format widths that overflow\n       an int and tighten the length check in gx_parse_output_format() and\n       gx_parse_output_file_name() in base/gsdevice.c.\n     - CVE-2024-46953\n   * SECURITY UPDATE: out-of-bounds data access in filenameforall\n     - debian/patches/CVE-2024-46956.patch: correct the buffer length check in\n       file_continue() in psi/zfile.c, so filenameforall cannot return a string\n       whose declared size exceeds the scratch buffer.\n     - CVE-2024-46956","modified":"2026-10-26T09:32:03.753659067Z","published":"2026-08-28T11:36:40Z","upstream":["CVE-2024-33871","CVE-2024-46951","CVE-2024-46953","CVE-2024-46956"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1787916987.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-33871"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-46951"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-46953"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-46956"}],"affected":[{"package":{"name":"ghostscript","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/ghostscript?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26~dfsg+0-0ubuntu0.18.04.18+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787916987.json"}},{"package":{"name":"ghostscript-doc","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/ghostscript-doc?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26~dfsg+0-0ubuntu0.18.04.18+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787916987.json"}},{"package":{"name":"ghostscript-x","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/ghostscript-x?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26~dfsg+0-0ubuntu0.18.04.18+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787916987.json"}},{"package":{"name":"libgs-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libgs-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26~dfsg+0-0ubuntu0.18.04.18+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787916987.json"}},{"package":{"name":"libgs9","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libgs9?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26~dfsg+0-0ubuntu0.18.04.18+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787916987.json"}},{"package":{"name":"libgs9-common","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libgs9-common?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26~dfsg+0-0ubuntu0.18.04.18+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787916987.json"}}],"schema_version":"1.9.0"}