High ELSA-2024-4000 1 CVE

Important: ghostscript security update (Oracle Linux 8)

Published Jun 20, 2024 · Updated Jun 20, 2024

Ecosystem: Oracle Linux

Summary

[9.27-13]
- CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library

Fixed packages 8

Release	Package	Fixed in
Oracle Linux · 8	ghostscript	0:9.27-13.el8_10
Oracle Linux · 8	ghostscript-doc	0:9.27-13.el8_10
Oracle Linux · 8	ghostscript-tools-dvipdf	0:9.27-13.el8_10
Oracle Linux · 8	ghostscript-tools-fonts	0:9.27-13.el8_10
Oracle Linux · 8	ghostscript-tools-printing	0:9.27-13.el8_10
Oracle Linux · 8	ghostscript-x11	0:9.27-13.el8_10
Oracle Linux · 8	libgs	0:9.27-13.el8_10
Oracle Linux · 8	libgs-devel	0:9.27-13.el8_10

Vulnerabilities 1

High 8.8

CVE-2024-33871

An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution …

ghostscript ghostscript ghostscript ghostscript Debian Ubuntu Alpine Wolfi

Jul 3, 2024