CVE-2024-29510 on Cloudlinux/Centos 7

Issue

Any chance that Ghostscript CVE-2024-29510 will be patched for Centos 7 releases?

Environment

• CVE-2024-29510
• Cloudlinux OS 7
• CentOS 7

Solution

We checked the situation, and it seems to be related to a third-party product Ghostscript. RedHat (the upstream for Cloudlinux and CentOS 7) official page informs that the fix is out of scope, so the situation needs to be clarified on the Ghostscript's side.

By the way, its website informs that the fix has already been released:

https://www.ghostscript.com/

• May 17, 2024: Ghostscript/GhostPDL 10.03.1 release fixes: CVE-2024-33869, CVE-2023-52722, CVE-2024-33870, CVE-2024-33871 and CVE-2024-29510.