OPENSUSE-SU-2026:20592-1: ghostscript&distro=openSUSE Leap 16.0 openSUSE

Vulnerability summary

OPENSUSE-SU-2026:20592-1 is a vulnerability in ghostscript&distro=openSUSE Leap 16.0 openSUSE with no CVSS score yet.

Timeline

1. 21-04-2026
   PublishedVulnerability first disclosed.
2. 23-04-2026
   Last modifiedVulnerability information updated.

Description

Security update for ghostscript This update for ghostscript fixes the following issues: Update to version 10.06.0. Security issues fixed: - CVE-2025-59800: an integer overflow can lead to a heap-based buffer overflow in ocr_line8 (bsc#1250355). - CVE-2025-59799: a large size value can cause a stack-based buffer overflow in pdfmark_coerce_dest (bsc#1250354). - CVE-2025-59798: stack-based buffer overflow in pdf_write_cmap can lead to a denial-of-service (bsc#1250353). - CVE-2025-48708: lacks of argument sanitization may lead to password disclosure (bsc#1243701). - CVE-2025-46646: mishandling of overlong utf-8 encoding in artifex ghostscript's decode_utf8 function (bsc#1257699). Other updates and bugfixes: - switch over to libalternatives for ghostscript to provide a gs variant (bsc#1245896) - Version upgrade to 10.06.0: * removes the non-standard operator "selectdevice" (cf. the entry below dated Tue Apr 1 09:56:06 UTC 2025) - Version upgrade to 10.05.1: * an overflow issue in Freetype on platforms where long is a 4 byte (rather than 8 byte) type (Microsoft Windows, for example) causing corrupted glyph rendering at higher resolutions * an issue with embedded files, affecting Zugferd format PDF creation. * broken logic in PDF Optional Content processing * potential slow down due to searching for identifiable font files * a small number of extreme edge case segmentation faults.

No weakness data has been published for this record.