Описание
Security update for ghostscript
This update for ghostscript fixes the following issues:
- CVE-2025-59798: Fixed stack-based buffer overflow in pdf_write_cmap in devices/vector/gdevpdtw.c. (bsc#1250353)
- CVE-2025-59799: Fixed stack-based buffer overflow in pdfmark_coerce_dest in devices/vector/gdevpdfm.c via a large size value. (bsc#1250354)
Список пакетов
SUSE Linux Enterprise Module for Basesystem 15 SP6
ghostscript-9.52-150000.211.1
ghostscript-devel-9.52-150000.211.1
ghostscript-x11-9.52-150000.211.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
ghostscript-9.52-150000.211.1
ghostscript-devel-9.52-150000.211.1
ghostscript-x11-9.52-150000.211.1
openSUSE Leap 15.6
ghostscript-9.52-150000.211.1
ghostscript-devel-9.52-150000.211.1
ghostscript-x11-9.52-150000.211.1
Ссылки
- Link for SUSE-SU-2025:4148-1
- E-Mail link for SUSE-SU-2025:4148-1
- SUSE Security Ratings
- SUSE Bug 1250353
- SUSE Bug 1250354
- SUSE CVE CVE-2025-59798 page
- SUSE CVE CVE-2025-59799 page
Описание
Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdf_write_cmap in devices/vector/gdevpdtw.c.
Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP6:ghostscript-9.52-150000.211.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:ghostscript-devel-9.52-150000.211.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:ghostscript-x11-9.52-150000.211.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:ghostscript-9.52-150000.211.1
Ссылки
- CVE-2025-59798
- SUSE Bug 1250353
Описание
Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdfmark_coerce_dest in devices/vector/gdevpdfm.c via a large size value.
Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP6:ghostscript-9.52-150000.211.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:ghostscript-devel-9.52-150000.211.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:ghostscript-x11-9.52-150000.211.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:ghostscript-9.52-150000.211.1
Ссылки
- CVE-2025-59799
- SUSE Bug 1250354