-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 05 Oct 2025 10:11:09 +0200 Source: ghostscript Binary: ghostscript ghostscript-dbgsym ghostscript-x libgs-dev libgs10 libgs10-dbgsym Architecture: i386 Version: 10.0.0~dfsg-11+deb12u8 Distribution: bookworm-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) Changed-By: Salvatore Bonaccorso Description: ghostscript - interpreter for the PostScript language and for PDF ghostscript-x - transitional package for ghostscript libgs-dev - interpreter for the PostScript language and for PDF - Development libgs10 - interpreter for the PostScript language and for PDF - Library Closes: 1109270 1116443 1116444 Changes: ghostscript (10.0.0~dfsg-11+deb12u8) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * Catch a null file pointer closing pdfwrite (CVE-2025-7462) (Closes: #1109270) * pdfwrite - bounds check some strings (CVE-2025-59799) (Closes: #1116443) * pdfwrite - avoid buffer overrun (CVE-2025-59798) (Closes: #1116444) Checksums-Sha1: a0120252e2a7f4e4d69f4b5a347463abb6f38a3b 5588 ghostscript-dbgsym_10.0.0~dfsg-11+deb12u8_i386.deb 3ffae75923950278c9774067217e3b40058de5f5 28604 ghostscript-x_10.0.0~dfsg-11+deb12u8_i386.deb d40e6b168d979f6e9c76f50f3e9679a89b5086a2 12200 ghostscript_10.0.0~dfsg-11+deb12u8_i386-buildd.buildinfo 846eff81f853f54a96fae71b547209d21a87421c 57848 ghostscript_10.0.0~dfsg-11+deb12u8_i386.deb 097905d5a7d0a4f32cbce7c2d704c098c9802a27 40120 libgs-dev_10.0.0~dfsg-11+deb12u8_i386.deb e24f9166685356d2b167981489935fc7fc13b4f0 8708120 libgs10-dbgsym_10.0.0~dfsg-11+deb12u8_i386.deb 435880cf308ca0c0cd719fa289473785408a04b8 2608880 libgs10_10.0.0~dfsg-11+deb12u8_i386.deb Checksums-Sha256: bdde1b3772a3f518241a45d7ea2ba4ff438305e4a30793a8ba9b5a5bb37b1ceb 5588 ghostscript-dbgsym_10.0.0~dfsg-11+deb12u8_i386.deb 6f4f87e3f72b48f2c325e9c36b3f742d2182a78bdb876b475a77996de3e5708a 28604 ghostscript-x_10.0.0~dfsg-11+deb12u8_i386.deb 776ba9b8ea7e5fb1a31c5a9e595484f35c13744ea0ec3b8f48472d5481ef5cd2 12200 ghostscript_10.0.0~dfsg-11+deb12u8_i386-buildd.buildinfo ff93bcb6d78540351e3df9b57b7db3f0ef43047fc15780a9e75bff2c7d3ea756 57848 ghostscript_10.0.0~dfsg-11+deb12u8_i386.deb f1d556a9ddeaa95e86ed2d7b91be12027b9102d6c70edcc9c448398ba1cc2990 40120 libgs-dev_10.0.0~dfsg-11+deb12u8_i386.deb e572008e8e3d8c6d659e6de305e4e86b35e183b6794b26a8da3188b5c45274cf 8708120 libgs10-dbgsym_10.0.0~dfsg-11+deb12u8_i386.deb 815183e0bd9fac54d2b0791c8bb8a9875a0b5cd99c8bf581283fe177623c7b31 2608880 libgs10_10.0.0~dfsg-11+deb12u8_i386.deb Files: 1432b6960072a4601a1c1749761cb3a6 5588 debug optional ghostscript-dbgsym_10.0.0~dfsg-11+deb12u8_i386.deb a04d18cd94343a8af888195adcb75ac7 28604 oldlibs optional ghostscript-x_10.0.0~dfsg-11+deb12u8_i386.deb bed8e1521b54ea018053074061e7d4f6 12200 text optional ghostscript_10.0.0~dfsg-11+deb12u8_i386-buildd.buildinfo 335000958a0e2339d700c9ee3bdcb493 57848 text optional ghostscript_10.0.0~dfsg-11+deb12u8_i386.deb c1f2ca5831dfc7d7fbf32b6b9ae6d7a2 40120 libdevel optional libgs-dev_10.0.0~dfsg-11+deb12u8_i386.deb 5d07d9cb1d00a0dfda021b8ab3e230c7 8708120 debug optional libgs10-dbgsym_10.0.0~dfsg-11+deb12u8_i386.deb 4ed0676fa04643132160fe661f081533 2608880 libs optional libgs10_10.0.0~dfsg-11+deb12u8_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEc5vuvf2HND40bnI+8IREj/cRiTMFAmjiVRMACgkQ8IREj/cR iTOEKxAApCHxXa39MikIJYZXQwg/Cknwn4xNTUTpstRbLviXmrMaXgQYl3YMuz49 6UpkUGK4cwj2PuRo5+Fe3AjVpjIReAHyXbiUsI0zA35dFdGRjLaBtBsGP7+2QdwQ GT8DVGf9zFthY9K/ojLi8Fxr1uReIqiaBMloQ0l/DUhBstjMskN4t4hRUXr94Xlm siajyMqKl0xxSZou30TIUvbXS81fABCuZ0kuXonxfrf61LTqQnrOoCrbGfwHKiXJ MIkl8aZp45wC2Kb8+ibd9MBNg/ckOxN2mtHnfvFsXQGI+Ru2xdS+FyghenXkHlXn m46527i6Gdr+U76t3aamgoMbjvGRYOkyTZ6lq4Sgdviif7+y6YrdwP7qm/vUd8/9 X6O9ot2tHBkwpO1hYXRVXpwUSQX5n1aGh3HDxDCBaI4V80xaY1oetGPdeoW6NFZj SWT1Mimkn/xc+Bzb/qwBbh3r64ii+Rg365gHcqDB0nk9TmNDICm2k6KJ1xl7DWiU n3+Td8i0Y5QRs5bjsIr2UicKx4zf7e6zFhUQYgnXSXd47izOIssOMEsGi+vGhS9M peDAODPs5xuPqy/aVVqA+RcVPcwu2j2i4yldhBvqoNNK4D54jQtvPiAyZSyrTRmy RO6VlF+VqKr9F4+zVvH45r4lQwsWqobHwyJ4Jiq9D0ec6U6tykc= =/R2Z -----END PGP SIGNATURE-----