Advisories » MGASA-2025-0098

Updated ghostscript packages fix security vulnerabilities

Publication date: 15 Mar 2025
Modification date: 15 Mar 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-27830 , CVE-2025-27831 , CVE-2025-27832 , CVE-2025-27833 , CVE-2025-27834 , CVE-2025-27835 , CVE-2025-27836 , CVE-2025-27837

Description

This release addresses CVEs: CVE-2025-27835, CVE-2025-27832,
CVE-2025-27831, CVE-2025-27836, CVE-2025-27830, CVE-2025-27833,
CVE-2025-27837, CVE-2025-27834
The 10.05.0 release deprecates the non-standard operator "selectdevice",
all code should now be using the standard "setpagedevice" operator.
"selectdevice" will be removed in the 10.06.0 release.
We now support production of PDF/X-1a and PDF/X-4a in addition to the
existing support for PDF/X-3
                

References

• https://bugs.mageia.org/show_bug.cgi?id=34088
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27830
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27831
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27832
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27833
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27834
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27835
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27836
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27837

SRPMS

9/core

• ghostscript-10.05.0-1.mga9