Back Linuxsecurity

openSUSE: ghostscript Moderate Buffer Overflow Vuln 2025:4148

Linuxsecurity •LinuxSecurity Advisories • November 20, 2025

This update for ghostscript fixes the following issues: * CVE-2025-59798: Fixed stack-based buffer overflow in pdf_write_cmap in devices/vector/gdevpdtw.c. (bsc#1250353) * CVE-2025-59799: Fixed stack-based buffer overflow in pdfmark_coerce_dest in devices/vector/gdevpdfm.c via a large size value. (bsc#1250354)

## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-4148=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-4148=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2025-4148=1

* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * ghostscript-x11-debuginfo-9.52-150000.211.1 * ghostscript-debuginfo-9.52-150000.211.1 * ghostscript-devel-9.52-150000.211.1 * ghostscript-9.52-150000.211.1 * ghostscript-debugsource-9.52-150000.211.1 * ghostscript-x11-9.52-150000.211.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * ghostscript-x11-debuginfo-9.52-150000.211.1 * ghostscript-debuginfo-9.52-150000.211.1 * ghostscript-devel-9.52-150000.211.1 * ghostscript-9.52-150000.211.1 * ghostscript-debugsource-9.52-150000.211.1 * ghostscript-x11-9.52-150000.211.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * ghostscript-x11-debuginfo-9.52-150000.211.1 * ghostscript-debuginfo-9.52-150000.211.1 * ghostscript-devel-9.52-150000.211.1 * ghostscript-9.52-150000.211.1 * ghostscript-debugsource-9.52-150000.211.1 * ghostscript-x11-9.52-150000.211.1

* bsc#1250353 * bsc#1250354 ## References: * * * *

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

openSUSE Ghostscript Moderate Buffer Overflow Vulnerabilities Addressed openSUSE has released updates for Ghostscript to fix two moderate buffer overflow vulnerabilities identified as CVE-2025-59798 and CVE-2025-59799. These vulnerabilities could potentially allow for stack-based buffer overflows in specific functions related to PDF processing. Users are advised to apply the patches using recommended installation methods. 3 sources 32

Extracted Entities

CVEs (2)

CVE-2025-59798 CVE-2025-59799

Platforms (1)

OpenSUSE Leap 15.6