[Buildroot] [PATCH 1/1] package/ghostscript: security bump to version 10.05.1

Arnout Vandecappelle arnout at rnout.be
Fri May 16 11:02:42 UTC 2025



On 11/05/2025 18:13, Bernd Kuhls wrote:
> Release notes: https://ghostscript.readthedocs.io/en/gs10.05.1/News.html
> 
> "This release addresses CVEs: CVE-2025-27835, CVE-2025-27832,
>   CVE-2025-27831, CVE-2025-27836, CVE-2025-27830, CVE-2025-27833,
>   CVE-2025-27837, CVE-2025-27834, CVE-2025-46646"
> 
> Signed-off-by: Bernd Kuhls <bernd at kuhls.net>

  Applied to 2025.02.x, thanks.

  Regards,
  Arnout

> ---
>   package/ghostscript/ghostscript.hash | 4 ++--
>   package/ghostscript/ghostscript.mk   | 2 +-
>   2 files changed, 3 insertions(+), 3 deletions(-)
> 
> diff --git a/package/ghostscript/ghostscript.hash b/package/ghostscript/ghostscript.hash
> index 8f44c444f1..c434ac1f3a 100644
> --- a/package/ghostscript/ghostscript.hash
> +++ b/package/ghostscript/ghostscript.hash
> @@ -1,5 +1,5 @@
> -# From https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs10050/SHA512SUMS
> -sha512  5a8695726ea2c70fd153bac47696c9e9046e9f74eccf8eea500794f79f09d5d2be70597c9d85c0b51b71d46d7974f50c5c9e3b0e242816bb84e64f1098a306a6  ghostscript-10.05.0.tar.xz
> +# From https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs10051/SHA512SUMS
> +sha512  1a3f2b0f53db9a00a245df19ce8fdce0fbccc6fad47b64d14fc9058b494ab07c77e21bb073df8d4a2522b3ccb0df26735f8224a9e36c07367031ed2262fb26af  ghostscript-10.05.1.tar.xz
>   
>   # Hash for license file:
>   sha256  8ce064f423b7c24a011b6ebf9431b8bf9861a5255e47c84bfb23fc526d030a8b  LICENSE
> diff --git a/package/ghostscript/ghostscript.mk b/package/ghostscript/ghostscript.mk
> index 9e2342e5ac..0ddcb950ff 100644
> --- a/package/ghostscript/ghostscript.mk
> +++ b/package/ghostscript/ghostscript.mk
> @@ -4,7 +4,7 @@
>   #
>   ################################################################################
>   
> -GHOSTSCRIPT_VERSION = 10.05.0
> +GHOSTSCRIPT_VERSION = 10.05.1
>   GHOSTSCRIPT_SOURCE = ghostscript-$(GHOSTSCRIPT_VERSION).tar.xz
>   GHOSTSCRIPT_SITE = https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs$(subst .,,$(GHOSTSCRIPT_VERSION))
>   GHOSTSCRIPT_LICENSE = AGPL-3.0



More information about the buildroot mailing list