Advisories » MGASA-2024-0192

Updated ghostscript packages fix security vulnerabilities

Publication date: 23 May 2024
Modification date: 23 May 2024
Type: security
Affected Mageia releases : 9
CVE: CVE-2024-29510 , CVE-2024-33869 , CVE-2024-33870 , CVE-2024-33871

Description

Multiple security issues were discovered in Ghostscript, the GPL
PostScript/PDF interpreter, which could result in denial of service and
potentially the execution of arbitrary code if malformed document files
are processed.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=33220
• https://lwn.net/Articles/973884/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29510
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33869
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33870
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33871

SRPMS

9/core

• ghostscript-10.03.1-1.mga9