Kevin Beaumont on Nostr: I think CVE-2024-29510 (Ghostscript vuln) may apply to Mastodon, as Mastodon sends ...
I think CVE-2024-29510 (Ghostscript vuln) may apply to Mastodon, as Mastodon sends images to ImageMagick, which can call Ghostscript. But I might be wrong.
Published at
2024-07-03 16:29:13Event JSON
{
"id": "fdd6147ecfbb599e7ad357044e6edccfef123f69673a0ccd4da3c20e533fc47a",
"pubkey": "f6870afcde4480ec8508f50304859e14a51309ff24ab3f0f862c52bdc4af8747",
"created_at": 1720024153,
"kind": 1,
"tags": [
[
"proxy",
"https://cyberplace.social/users/GossiTheDog/statuses/112723502940530795",
"activitypub"
]
],
"content": "I think CVE-2024-29510 (Ghostscript vuln) may apply to Mastodon, as Mastodon sends images to ImageMagick, which can call Ghostscript. But I might be wrong.",
"sig": "15c65e687d5a33ba3a9621bdadb417517e742e58bf0e20386eec66181cc137ea2c37a8fcc76ab1bc1211fbb6ffc39e57d396f761acb0b65cfc87b6ff952f9bf8"
}