Lucene search

K
amazonAmazonALAS-2024-2597
HistoryJul 18, 2024 - 2:00 a.m.

Important: ghostscript

2024-07-1802:00:00
alas.aws.amazon.com
3
ghostscript
security update
cve-2024-29510
amazon linux 2

CVSS3

6.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

AI Score

6.9

Confidence

Low

Issue Overview:

NOTE: https://ghostscript.readthedocs.io/en/gs10.03.1/News.html
NOTE: https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=3b1735085ecef20b29e8db3416ab36de93e86d1f (ghostpdl-10.03.1)
NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=707662
ADVISORIES: [‘DSA-5692-1’] (CVE-2024-29510)

Affected Packages:

ghostscript

Note:

This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.

Issue Correction:
Run yum update ghostscript to update your system.

New Packages:

aarch64:  
    ghostscript-9.54.0-9.amzn2.0.4.aarch64  
    libgs-9.54.0-9.amzn2.0.4.aarch64  
    libgs-devel-9.54.0-9.amzn2.0.4.aarch64  
    ghostscript-gtk-9.54.0-9.amzn2.0.4.aarch64  
    ghostscript-cups-9.54.0-9.amzn2.0.4.aarch64  
    ghostscript-debuginfo-9.54.0-9.amzn2.0.4.aarch64  
  
i686:  
    ghostscript-9.54.0-9.amzn2.0.4.i686  
    libgs-9.54.0-9.amzn2.0.4.i686  
    libgs-devel-9.54.0-9.amzn2.0.4.i686  
    ghostscript-gtk-9.54.0-9.amzn2.0.4.i686  
    ghostscript-cups-9.54.0-9.amzn2.0.4.i686  
    ghostscript-debuginfo-9.54.0-9.amzn2.0.4.i686  
  
noarch:  
    ghostscript-doc-9.54.0-9.amzn2.0.4.noarch  
  
src:  
    ghostscript-9.54.0-9.amzn2.0.4.src  
  
x86_64:  
    ghostscript-9.54.0-9.amzn2.0.4.x86_64  
    libgs-9.54.0-9.amzn2.0.4.x86_64  
    libgs-devel-9.54.0-9.amzn2.0.4.x86_64  
    ghostscript-gtk-9.54.0-9.amzn2.0.4.x86_64  
    ghostscript-cups-9.54.0-9.amzn2.0.4.x86_64  
    ghostscript-debuginfo-9.54.0-9.amzn2.0.4.x86_64  

Additional References

Red Hat: CVE-2024-29510

Mitre: CVE-2024-29510

CVSS3

6.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

AI Score

6.9

Confidence

Low