Critical Ghostscript Security Advisory for Fedora 40: CVE-2024-33871 Explored
Summary
This package provides useful conversion utilities based on Ghostscript software,
for converting PS, PDF and other document formats between each other.
Ghostscript is a suite of software providing an interpreter for Adobe Systems'
PostScript (PS) and Portable Document Format (PDF) page description languages.
Its primary purpose includes displaying (rasterization & rendering) and printing
of document pages, as well as conversions between different document formats.
Update Information:
Security fix for CVE-2024-33871
Change Log
* Thu May 30 2024 Zdenek Dohnal
References
[ 1 ] Bug #2283508 - CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library
https://bugzilla.redhat.com/show_bug.cgi?id=2283508
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-939eac36ae' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label