Lucene search

K
amazonAmazonALAS-2024-2562
HistoryJun 06, 2024 - 8:17 p.m.

Important: ghostscript

2024-06-0620:17:00
alas.aws.amazon.com
3
security advisory
amazon linux 2
yum update
cve-2024-33871

6.9 Medium

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

Issue Overview:

NOTE: https://ghostscript.readthedocs.io/en/gs10.03.1/News.html
NOTE: https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=7145885041bb52cc23964f0aa2aec1b1c82b5908 (ghostpdl-10.03.1)
NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=707754 (CVE-2024-33871)

Affected Packages:

ghostscript

Note:

This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.

Issue Correction:
Run yum update ghostscript to update your system.

New Packages:

aarch64:  
    ghostscript-9.54.0-9.amzn2.0.3.aarch64  
    libgs-9.54.0-9.amzn2.0.3.aarch64  
    libgs-devel-9.54.0-9.amzn2.0.3.aarch64  
    ghostscript-gtk-9.54.0-9.amzn2.0.3.aarch64  
    ghostscript-cups-9.54.0-9.amzn2.0.3.aarch64  
    ghostscript-debuginfo-9.54.0-9.amzn2.0.3.aarch64  
  
i686:  
    ghostscript-9.54.0-9.amzn2.0.3.i686  
    libgs-9.54.0-9.amzn2.0.3.i686  
    libgs-devel-9.54.0-9.amzn2.0.3.i686  
    ghostscript-gtk-9.54.0-9.amzn2.0.3.i686  
    ghostscript-cups-9.54.0-9.amzn2.0.3.i686  
    ghostscript-debuginfo-9.54.0-9.amzn2.0.3.i686  
  
noarch:  
    ghostscript-doc-9.54.0-9.amzn2.0.3.noarch  
  
src:  
    ghostscript-9.54.0-9.amzn2.0.3.src  
  
x86_64:  
    ghostscript-9.54.0-9.amzn2.0.3.x86_64  
    libgs-9.54.0-9.amzn2.0.3.x86_64  
    libgs-devel-9.54.0-9.amzn2.0.3.x86_64  
    ghostscript-gtk-9.54.0-9.amzn2.0.3.x86_64  
    ghostscript-cups-9.54.0-9.amzn2.0.3.x86_64  
    ghostscript-debuginfo-9.54.0-9.amzn2.0.3.x86_64  

Additional References

Red Hat: CVE-2024-33871

Mitre: CVE-2024-33871

6.9 Medium

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%