[Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-59800/ghostscript
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sat Sep 27 12:28:38 BST 2025
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
60f4056e by Salvatore Bonaccorso at 2025-09-27T13:27:58+02:00
Update status for CVE-2025-59800/ghostscript
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2310,9 +2310,10 @@ CVE-2025-59801 (In Artifex GhostXPS before 10.06.0, there is a stack-based buffe
NOTE: https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=d12002b16c59e12d97f42fb2c70caded8b1b6aa8 (ghostpdl-10.06.0)
NOTE: GhostXPS code not compiled
CVE-2025-59800 (In Artifex Ghostscript through 10.05.1, ocr_begin_page in devices/gdev ...)
- - ghostscript <unfixed>
+ - ghostscript <unfixed> (unimportant)
NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=708602
NOTE: https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=176cf0188a2294bc307b8caec876f39412e58350 (ghostpdl-10.06.0rc1)
+ NOTE: Ghostscript in Debian not compiled with Tesseract support
CVE-2025-59799 (Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow ...)
- ghostscript <unfixed>
NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=708517
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/60f4056eedb97571c923d400e6a408d023ee1472
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/60f4056eedb97571c923d400e6a408d023ee1472
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250927/1db39bcf/attachment.htm>
More information about the debian-security-tracker-commits
mailing list