fix(cve): CVE-2010-1628 - Change the order of allocations because alloc_save_change_alloc() leaves

debian/changelog

@@ -1,3 +1,63 @@
+ghostscript (10.05.1~dfsg-3deepin11) unstable; urgency=medium
+
+  * fix(cve): CVE-2017-8908
+
+ -- deepin-ci-robot <packages@deepin.org>  Tue, 28 Jul 2026 08:31:59 +0800
+
+ghostscript (10.05.1~dfsg-3deepin10) unstable; urgency=medium
+
+  * fix(cve): CVE-2025-59800
+
+ -- deepin-ci-robot <packages@deepin.org>  Tue, 28 Jul 2026 07:30:01 +0800
+
+ghostscript (10.05.1~dfsg-3deepin9) unstable; urgency=medium
+
+  * fix(cve): CVE-2018-16539
+
+ -- deepin-ci-robot <packages@deepin.org>  Tue, 28 Jul 2026 07:03:30 +0800
+
+ghostscript (10.05.1~dfsg-3deepin8) unstable; urgency=medium
+
+  * fix(cve): CVE-2025-59798
+
+ -- deepin-ci-robot <packages@deepin.org>  Tue, 28 Jul 2026 06:29:20 +0800
+
+ghostscript (10.05.1~dfsg-3deepin7) unstable; urgency=medium
+
+  * fix(cve): CVE-2025-59799
+
+ -- deepin-ci-robot <packages@deepin.org>  Tue, 28 Jul 2026 06:09:47 +0800
+
+ghostscript (10.05.1~dfsg-3deepin6) unstable; urgency=medium
+
+  * fix(cve): CVE-2025-59801
+
+ -- deepin-ci-robot <packages@deepin.org>  Tue, 28 Jul 2026 04:32:35 +0800
+
+ghostscript (10.05.1~dfsg-3deepin5) unstable; urgency=medium
+
+  * fix(cve): CVE-2017-7948
+
+ -- deepin-ci-robot <packages@deepin.org>  Tue, 28 Jul 2026 03:05:30 +0800
+
+ghostscript (10.05.1~dfsg-3deepin4) unstable; urgency=medium
+
+  * fix(cve): CVE-2018-17183
+
+ -- deepin-ci-robot <packages@deepin.org>  Tue, 28 Jul 2026 00:59:46 +0800
+
+ghostscript (10.05.1~dfsg-3deepin3) unstable; urgency=medium
+
+  * fix(cve): CVE-2017-9619
+
+ -- deepin-ci-robot <packages@deepin.org>  Tue, 28 Jul 2026 00:28:47 +0800
+
+ghostscript (10.05.1~dfsg-3deepin2) unstable; urgency=medium
+
+  * fix(cve): CVE-2010-1628
+
+ -- deepin-ci-robot <packages@deepin.org>  Mon, 27 Jul 2026 22:08:22 +0800
+
 ghostscript (10.05.1~dfsg-3deepin1) unstable; urgency=medium
 
   * Add libgs9-common transitional package for smooth upgrading

debian/patches/CVE-2010-1628.patch

@@ -0,0 +1,40 @@
+Description: CVE-2010-1628 - 安全修复
+Author: Alex Cherepanov <alex.cherepanov@artifex.com>
+Origin: https://github.com/ArtifexSoftware/ghostpdl/commit/e833acd440c5ff694cec3237eeed45cef69eb02e
+Bug: https://nvd.nist.gov/vuln/detail/CVE-2010-1628
+Last-Update: 2007-02-12
+---
+diff --git a/psi/ialloc.c b/psi/ialloc.c
+index 40216e4..708ddce 100644
+--- a/psi/ialloc.c
++++ b/psi/ialloc.c
+@@ -218,11 +218,6 @@ gs_alloc_ref_array(gs_ref_memory_t * mem, ref * parr, uint attrs,
+         alloc_change_t *cp = 0;
+         int code = 0;
+
+-        if ((gs_memory_t *)mem != mem->stable_memory) {
+-            code = alloc_save_change_alloc(mem, "gs_alloc_ref_array", &cp);
+-            if (code < 0)
+-                return code;
+-        }
+         obj = gs_alloc_struct_array((gs_memory_t *) mem, num_refs + 1,
+                                     ref, &st_refs, cname);
+         if (obj == 0) {
+@@ -257,9 +252,14 @@ gs_alloc_ref_array(gs_ref_memory_t * mem, ref * parr, uint attrs,
+                 gs_abort((gs_memory_t *) mem);
+             }
+         }
+-        if (cp) {
+-            mem->changes = cp;
+-            cp->where = (ref_packed *)obj;
++        if ((gs_memory_t *)mem != mem->stable_memory) {
++            code = alloc_save_change_alloc(mem, "gs_alloc_ref_array", &cp);
++            if (code < 0)
++                return code;
++            if (cp) {
++                mem->changes = cp;
++                cp->where = (ref_packed *)obj;
++            }
+         }
+     }
+     for (i = 0; i < num_refs; i++) {