Medium: ghostscript

Issue Overview:

NOTE: https://ghostscript.readthedocs.io/en/gs10.03.1/News.html
NOTE: https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=5ae2e320d69a7d0973011796bd388cd5befa1a43 (ghostpdl-10.03.1)
NOTE: https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f5336e5b4154f515ac83bc5b9eba94302e6618d4 (ghostpdl-10.03.1)
NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=707691
ADVISORIES: [‘DSA-5692-1’] (CVE-2024-33869)

NOTE: https://ghostscript.readthedocs.io/en/gs10.03.1/News.html
NOTE: https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=79aef19c685984dc3da2dc090450407d9fbcff80 (ghostpdl-10.03.1)
NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=707686
ADVISORIES: [‘DSA-5692-1’] (CVE-2024-33870)

Affected Packages:

ghostscript

Note:

This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.

Issue Correction:
Run yum update ghostscript to update your system.

New Packages:

aarch64:  
    ghostscript-9.54.0-9.amzn2.0.6.aarch64  
    libgs-9.54.0-9.amzn2.0.6.aarch64  
    libgs-devel-9.54.0-9.amzn2.0.6.aarch64  
    ghostscript-gtk-9.54.0-9.amzn2.0.6.aarch64  
    ghostscript-cups-9.54.0-9.amzn2.0.6.aarch64  
    ghostscript-debuginfo-9.54.0-9.amzn2.0.6.aarch64  
  
i686:  
    ghostscript-9.54.0-9.amzn2.0.6.i686  
    libgs-9.54.0-9.amzn2.0.6.i686  
    libgs-devel-9.54.0-9.amzn2.0.6.i686  
    ghostscript-gtk-9.54.0-9.amzn2.0.6.i686  
    ghostscript-cups-9.54.0-9.amzn2.0.6.i686  
    ghostscript-debuginfo-9.54.0-9.amzn2.0.6.i686  
  
noarch:  
    ghostscript-doc-9.54.0-9.amzn2.0.6.noarch  
  
src:  
    ghostscript-9.54.0-9.amzn2.0.6.src  
  
x86_64:  
    ghostscript-9.54.0-9.amzn2.0.6.x86_64  
    libgs-9.54.0-9.amzn2.0.6.x86_64  
    libgs-devel-9.54.0-9.amzn2.0.6.x86_64  
    ghostscript-gtk-9.54.0-9.amzn2.0.6.x86_64  
    ghostscript-cups-9.54.0-9.amzn2.0.6.x86_64  
    ghostscript-debuginfo-9.54.0-9.amzn2.0.6.x86_64  

Additional References

Red Hat: CVE-2024-33869, CVE-2024-33870

Mitre: CVE-2024-33869, CVE-2024-33870