High ELSA-2024-4549 1 CVE

Important: ghostscript security update (Oracle Linux 7)

Published Sep 17, 2024 · Updated Sep 17, 2024

Ecosystem: Oracle Linux

Summary

[9.25-5.0.1]
- Fixes CVE-2024-33871 OPVP device arbitrary code execution via custom Driver library

Fixed packages 6

Release	Package	Fixed in
Oracle Linux · 7	ghostscript	0:9.25-5.0.1.el7
Oracle Linux · 7	ghostscript-cups	0:9.25-5.0.1.el7
Oracle Linux · 7	ghostscript-doc	0:9.25-5.0.1.el7
Oracle Linux · 7	ghostscript-gtk	0:9.25-5.0.1.el7
Oracle Linux · 7	libgs	0:9.25-5.0.1.el7
Oracle Linux · 7	libgs-devel	0:9.25-5.0.1.el7

Vulnerabilities 1

High 8.8

CVE-2024-33871

An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution …

ghostscript ghostscript ghostscript ghostscript Debian Ubuntu Alpine Wolfi

Jul 3, 2024