-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 08 Oct 2026 21:45:14 +0200 Source: ghostscript Binary: ghostscript ghostscript-dbgsym libgs-dev libgs10 libgs10-dbgsym Architecture: amd64 Version: 10.05.1~dfsg-1+deb13u3 Distribution: trixie-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Salvatore Bonaccorso Description: ghostscript - interpreter for the PostScript language and for PDF libgs-dev - interpreter for the PostScript language and for PDF - Development libgs10 - interpreter for the PostScript language and for PDF - Library Changes: ghostscript (10.05.1~dfsg-1+deb13u3) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * PostScript interpreter - don't permit local inside global storage (CVE-2026-101258) * graphics library - Shadings with arrays of Functions, validate 1-out (CVE-2026-101258) * pdfwrite - bound check control stack in type 1->2 font conversion (CVE-2026-103226) Checksums-Sha1: 4c8afe23b864dd78e4beb0afe3d666cf7936e8b7 6264 ghostscript-dbgsym_10.05.1~dfsg-1+deb13u3_amd64.deb a7f786477ce55169c35c6c9cd370e5da57ebd171 11769 ghostscript_10.05.1~dfsg-1+deb13u3_amd64-buildd.buildinfo fdcc3d2b8e41bde8d68bd6f27996f91e675463ba 50612 ghostscript_10.05.1~dfsg-1+deb13u3_amd64.deb 7d68795074b85ed29d034f724d1dc99413ee06da 39484 libgs-dev_10.05.1~dfsg-1+deb13u3_amd64.deb 8ccf9e43b9e1b31f7c82bfc5dfaef7d65bbe06b3 10067440 libgs10-dbgsym_10.05.1~dfsg-1+deb13u3_amd64.deb 26f4432d5d8c5917667ac1439859138a4842a41f 2566432 libgs10_10.05.1~dfsg-1+deb13u3_amd64.deb Checksums-Sha256: 9a2d8e0eb1134f6c679eba001e24bcdb96158906188c4b441c1c96b1e73f7f27 6264 ghostscript-dbgsym_10.05.1~dfsg-1+deb13u3_amd64.deb 6eb93cfba3e0fb308a2d78cd0cd8064ea61d87c3643302cbd3d718600498baef 11769 ghostscript_10.05.1~dfsg-1+deb13u3_amd64-buildd.buildinfo 8bacb4fc1a409b99fb8f3b4182324068979e37388639f3aee03eb8b9e6f4e252 50612 ghostscript_10.05.1~dfsg-1+deb13u3_amd64.deb fcb0c627c4f535b888872fa513c31bcfefa53cffaea76c177a2206ece02e3f9b 39484 libgs-dev_10.05.1~dfsg-1+deb13u3_amd64.deb 766611c314814c2f344482cb7f5b8d0377a451c177d197173993d500a6d03dfd 10067440 libgs10-dbgsym_10.05.1~dfsg-1+deb13u3_amd64.deb 6b304d55801354de3fbaec0b000c8b31aa25335ebea25593b72832aff2228655 2566432 libgs10_10.05.1~dfsg-1+deb13u3_amd64.deb Files: d0cc6adae26132219a7e1a5ed27f6ef7 6264 debug optional ghostscript-dbgsym_10.05.1~dfsg-1+deb13u3_amd64.deb ac75f26f9e3c91fd383fdd36d352e0d7 11769 text optional ghostscript_10.05.1~dfsg-1+deb13u3_amd64-buildd.buildinfo cbe9b9e96d53b82afaf5dc77e2a68671 50612 text optional ghostscript_10.05.1~dfsg-1+deb13u3_amd64.deb d04df1dd3fa9464ecbc2d5c1405e112d 39484 libdevel optional libgs-dev_10.05.1~dfsg-1+deb13u3_amd64.deb a62c87c1f7a9e19ad433fba2be3ee3e4 10067440 debug optional libgs10-dbgsym_10.05.1~dfsg-1+deb13u3_amd64.deb 3d9cc1100f1fe2babfd0e5544476c26d 2566432 libs optional libgs10_10.05.1~dfsg-1+deb13u3_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEmtr4KUMaso2EQ6NrTwt/65ON6zcFAmrIFXYACgkQTwt/65ON 6zdKbRAAjKcE7Sh3UEf39GUJi4WULuexZwWxcjvACuM8L3eF/QugdwLZGm5vPxYg maQO4j07HkbGXaPnVsNPzug867MFLR/fFZDEPrEFU15v3sKPpSIo+gE7kXgaTWfs zVav/ZZGyskcwaeB9Llpdsr7bt6fB6ikP+TEdiaNTUdcHiFZFtS6KSEdZPb9oCBB OtIGFq9XoqFgCWsHk8gsm00yvwBvNmHQ3lrw8skuSs7IidhVAOKaracpVpuV3iUh zjkPpU7efo4afL8ObSrEm/uuFGSweflZ8n3v1RInbaSTXXZ7bvHDsCfcQ+7hKe9Y inMy5m5cGHwcnfWbN6mTHtATaztxi6HTe1eHh166iixna3UyndkcXTxqjqudlb7k EF9aWRkiV6nLt4c6m5HviBlqb8VI1oXkvOjJeXYgFVMW3xVZVh/VXAXPrzveXS2F pQKw+6w6GgtcAeTZDavLjzJVg6A3am2+YYFOYiStZt1a8EOjAtvf4IB2Pu/rmQCM jpHLH0QzA66wRO/YDZ2eS2MzrPInf39tEFPUfXnccJEdkISDxjV9Jik73ZtLCj1P aE18LjfsGy+8FF6moYwGj7fgOhPTMmMAliy7biqCYHFk0gbDOw9uTML6cC629cDa 8w5YgSkPuv0OvEUIq+eJALR7V0cjxZ8EkyHKTz+dOBczcL8GVq4= =jjpJ -----END PGP SIGNATURE-----