ALSA-2026:83551
Important: ghostscript security update
Published Oct 15, 2026 · updated Oct 15, 2026
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (CVE-2026-101258) * ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data (CVE-2026-103226) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 15, 2026 · OSV.dev
Detected
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (CVE-2026-101258) * ghostscript: ghostscript: stack-based buffer overfl
Oct 15, 2026 · OSV.dev
Fix available
ghostscript fixed in 10.02.1-16.el10_2.3; ghostscript-doc fixed in 10.02.1-16.el10_2.3; ghostscript-tools-dvipdf fixed in 10.02.1-16.el10_2.3; ghostscript-tools-fonts fixed in 10.02.1-16.el10_2.3
Oct 15, 2026 · OSV.dev
Fix available
ghostscript fixed in 10.02.1-16.el10_2.3
Oct 15, 2026 · OSV.dev
Fix available
ghostscript-doc fixed in 10.02.1-16.el10_2.3
Oct 15, 2026 · OSV.dev
Fix available
ghostscript-tools-dvipdf fixed in 10.02.1-16.el10_2.3
Oct 15, 2026 · OSV.dev
Fix available
ghostscript-tools-fonts fixed in 10.02.1-16.el10_2.3
Oct 15, 2026 · OSV.dev
Fix available
ghostscript-tools-printing fixed in 10.02.1-16.el10_2.3
Oct 15, 2026 · OSV.dev
Fix available
libgs fixed in 10.02.1-16.el10_2.3
Oct 15, 2026 · OSV.dev
Fix available
libgs-devel fixed in 10.02.1-16.el10_2.3
Oct 15, 2026 · OSV.dev
Updated
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (CVE-2026-101258) * ghostscript: ghostscript: stack-based buffer overfl
Affected
- AlmaLinux:10 ghostscript0 → 10.02.1-16.el10_2.3
- AlmaLinux:10 ghostscript-doc0 → 10.02.1-16.el10_2.3
- AlmaLinux:10 ghostscript-tools-dvipdf0 → 10.02.1-16.el10_2.3
- AlmaLinux:10 ghostscript-tools-fonts0 → 10.02.1-16.el10_2.3
- AlmaLinux:10 ghostscript-tools-printing0 → 10.02.1-16.el10_2.3
- AlmaLinux:10 libgs0 → 10.02.1-16.el10_2.3
- AlmaLinux:10 libgs-devel0 → 10.02.1-16.el10_2.3