ALAS-2024-2612


Amazon Linux 2 Security Advisory: ALAS-2024-2612
Advisory Release Date: 2024-08-01 03:01 Pacific
Advisory Updated Date: 2024-08-13 09:45 Pacific
Severity: Medium

Issue Overview:

NOTE: https://ghostscript.readthedocs.io/en/gs10.03.1/News.html
NOTE: https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=5ae2e320d69a7d0973011796bd388cd5befa1a43 (ghostpdl-10.03.1)
NOTE: https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f5336e5b4154f515ac83bc5b9eba94302e6618d4 (ghostpdl-10.03.1)
NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=707691
ADVISORIES: ['DSA-5692-1'] (CVE-2024-33869)

NOTE: https://ghostscript.readthedocs.io/en/gs10.03.1/News.html
NOTE: https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=79aef19c685984dc3da2dc090450407d9fbcff80 (ghostpdl-10.03.1)
NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=707686
ADVISORIES: ['DSA-5692-1'] (CVE-2024-33870)


Affected Packages:

ghostscript


Note:

This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.


Issue Correction:
Run yum update ghostscript to update your system.

New Packages:
aarch64:
    ghostscript-9.54.0-9.amzn2.0.6.aarch64
    libgs-9.54.0-9.amzn2.0.6.aarch64
    libgs-devel-9.54.0-9.amzn2.0.6.aarch64
    ghostscript-gtk-9.54.0-9.amzn2.0.6.aarch64
    ghostscript-cups-9.54.0-9.amzn2.0.6.aarch64
    ghostscript-debuginfo-9.54.0-9.amzn2.0.6.aarch64

i686:
    ghostscript-9.54.0-9.amzn2.0.6.i686
    libgs-9.54.0-9.amzn2.0.6.i686
    libgs-devel-9.54.0-9.amzn2.0.6.i686
    ghostscript-gtk-9.54.0-9.amzn2.0.6.i686
    ghostscript-cups-9.54.0-9.amzn2.0.6.i686
    ghostscript-debuginfo-9.54.0-9.amzn2.0.6.i686

noarch:
    ghostscript-doc-9.54.0-9.amzn2.0.6.noarch

src:
    ghostscript-9.54.0-9.amzn2.0.6.src

x86_64:
    ghostscript-9.54.0-9.amzn2.0.6.x86_64
    libgs-9.54.0-9.amzn2.0.6.x86_64
    libgs-devel-9.54.0-9.amzn2.0.6.x86_64
    ghostscript-gtk-9.54.0-9.amzn2.0.6.x86_64
    ghostscript-cups-9.54.0-9.amzn2.0.6.x86_64
    ghostscript-debuginfo-9.54.0-9.amzn2.0.6.x86_64