CVE-2024-33869: Ghostscript path traversal via unresolved symlinks in SAFER mode

Ghostscript 10.03.0 before 10.03.1 contains a path traversal vulnerability in its SAFER (restricted) mode. The vulnerability allows attackers to bypass path validation and read/write files outside the sandbox by creating symbolic links or using unresolved relative path components. The path validation function gp_validate_path_len() performs only string-level path normalization without resolving symbolic links, leading to a TOCTOU (Time-of-Check-Time-of-Use) vulnerability.