UbuntuUpdates.org

Package "ghostscript"

Name: ghostscript

Description:

interpreter for the PostScript language and for PDF
Latest version: 10.02.1~dfsg1-0ubuntu7.10
Release: noble (24.04)
Level: security
Repository: main
Homepage: https://www.ghostscript.com/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "ghostscript"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "ghostscript" in Noble

Repository Area Version
base main 10.02.1~dfsg1-0ubuntu7
updates main 10.02.1~dfsg1-0ubuntu7.9

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 10.02.1~dfsg1-0ubuntu7.10 2026-10-21 16:07:39 UTC
No changelog available yet.
Source diff to previous version

Version: 10.02.1~dfsg1-0ubuntu7.9 2026-09-21 15:07:32 UTC

ghostscript (10.02.1~dfsg1-0ubuntu7.9) noble-security; urgency=medium

  * SECURITY UPDATE: heap overflow in JPEG 2000 output adapter
    - debian/patches/CVE-2026-39919.patch: OpenJPEG - Fix overreading bytes in
      some conditions in base/sjpx_openjpeg.c.
    - CVE-2026-39919

 -- Marc Deslauriers Fri, 18 Sep 2026 13:45:46 -0400
Source diff to previous version
CVE-2026-39919 Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter (base/sjpx_openjpeg.c) that allows att

Version: 10.02.1~dfsg1-0ubuntu7.8 2025-09-29 15:07:25 UTC

  ghostscript (10.02.1~dfsg1-0ubuntu7.8) noble-security; urgency=medium

  * SECURITY UPDATE: null pointer deref on file write failure
    - debian/patches/CVE-2025-7462.patch: catch a null file pointer closing
      pdfwrite in devices/vector/gdevpdf.c.
    - CVE-2025-7462
  * SECURITY UPDATE: stack overflow in pdf_write_cmap
    - debian/patches/CVE-2025-59798.patch: use dynamically allocated buffer
      and check return codes in devices/vector/gdevpdtw.c.
    - CVE-2025-59798
  * SECURITY UPDATE: stack overflow in pdfmark_coerce_dest
    - debian/patches/CVE-2025-59799.patch: bounds check some strings in
      devices/vector/gdevpdfm.c.
    - CVE-2025-59799
  * SECURITY UPDATE: heap overflow in ocr_begin_page
    - debian/patches/CVE-2025-59800.patch: fix int overflow in
      devices/gdevpdfocr.c.
    - CVE-2025-59800

 -- Marc Deslauriers <email address hidden> Thu, 25 Sep 2025 12:37:20 -0400
Source diff to previous version
CVE-2025-7462 A vulnerability was found in Artifex GhostPDL up to 3989415a5b8e99b9d1b87cc9902bde9b7cdea145. It has been classified as problematic. This affects the
CVE-2025-59798 Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdf_write_cmap in devices/vector/gdevpdtw.c.
CVE-2025-59799 Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdfmark_coerce_dest in devices/vector/gdevpdfm.c via a large size value.
CVE-2025-59800 In Artifex Ghostscript through 10.05.1, ocr_begin_page in devices/gdevpdfocr.c has an integer overflow that leads to a heap-based buffer overflow in

Version: 10.02.1~dfsg1-0ubuntu7.7 2025-07-08 06:06:57 UTC

  ghostscript (10.02.1~dfsg1-0ubuntu7.7) noble-security; urgency=medium

  * SECURITY UPDATE: Information Leak
    - debian/patches/CVE-2025-48708.patch: Argument sanitization handle
      '#' as per '='
    - CVE-2025-48708

 -- Bruce Cable <email address hidden> Thu, 03 Jul 2025 15:29:52 +1000
Source diff to previous version
CVE-2025-48708 gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF doc

Version: 10.02.1~dfsg1-0ubuntu7.6 2025-05-01 15:07:13 UTC

  ghostscript (10.02.1~dfsg1-0ubuntu7.6) noble-security; urgency=medium

  * SECURITY UPDATE: directory escape via overlong encodings
    - debian/patches/CVE-2025-46646.patch: handle another set of sequences
      in base/gp_utf8.c.
    - CVE-2025-46646

 -- Marc Deslauriers <email address hidden> Wed, 30 Apr 2025 09:26:37 -0400
CVE-2025-46646 In Artifex Ghostscript before 10.05.0, decode_utf8 in base/gp_utf8.c mishandles overlong UTF-8 encoding. NOTE: this issue exists because of an incomp


About   -   Send Feedback to @ubuntu_updates