ALAS-2024-2562


Amazon Linux 2 Security Advisory: ALAS-2024-2562
Advisory Release Date: 2024-06-06 20:17 Pacific
Advisory Updated Date: 2024-06-12 20:25 Pacific
Severity: Important

Issue Overview:

NOTE: https://ghostscript.readthedocs.io/en/gs10.03.1/News.html
NOTE: https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=7145885041bb52cc23964f0aa2aec1b1c82b5908 (ghostpdl-10.03.1)
NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=707754 (CVE-2024-33871)


Affected Packages:

ghostscript


Note:

This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.


Issue Correction:
Run yum update ghostscript to update your system.

New Packages:
aarch64:
    ghostscript-9.54.0-9.amzn2.0.3.aarch64
    libgs-9.54.0-9.amzn2.0.3.aarch64
    libgs-devel-9.54.0-9.amzn2.0.3.aarch64
    ghostscript-gtk-9.54.0-9.amzn2.0.3.aarch64
    ghostscript-cups-9.54.0-9.amzn2.0.3.aarch64
    ghostscript-debuginfo-9.54.0-9.amzn2.0.3.aarch64

i686:
    ghostscript-9.54.0-9.amzn2.0.3.i686
    libgs-9.54.0-9.amzn2.0.3.i686
    libgs-devel-9.54.0-9.amzn2.0.3.i686
    ghostscript-gtk-9.54.0-9.amzn2.0.3.i686
    ghostscript-cups-9.54.0-9.amzn2.0.3.i686
    ghostscript-debuginfo-9.54.0-9.amzn2.0.3.i686

noarch:
    ghostscript-doc-9.54.0-9.amzn2.0.3.noarch

src:
    ghostscript-9.54.0-9.amzn2.0.3.src

x86_64:
    ghostscript-9.54.0-9.amzn2.0.3.x86_64
    libgs-9.54.0-9.amzn2.0.3.x86_64
    libgs-devel-9.54.0-9.amzn2.0.3.x86_64
    ghostscript-gtk-9.54.0-9.amzn2.0.3.x86_64
    ghostscript-cups-9.54.0-9.amzn2.0.3.x86_64
    ghostscript-debuginfo-9.54.0-9.amzn2.0.3.x86_64