ALSA-2026:83552
Important: ghostscript security update
Published Oct 15, 2026 · updated Oct 15, 2026
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (CVE-2026-101258) * ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data (CVE-2026-103226) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 15, 2026 · OSV.dev
Detected
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (CVE-2026-101258) * ghostscript: ghostscript: stack-based buffer overfl
Oct 15, 2026 · OSV.dev
Fix available
ghostscript fixed in 9.27-19.el8_10; ghostscript-doc fixed in 9.27-19.el8_10; ghostscript-tools-dvipdf fixed in 9.27-19.el8_10; ghostscript-tools-fonts fixed in 9.27-19.el8_10
Oct 15, 2026 · OSV.dev
Fix available
ghostscript fixed in 9.27-19.el8_10
Oct 15, 2026 · OSV.dev
Fix available
ghostscript-doc fixed in 9.27-19.el8_10
Oct 15, 2026 · OSV.dev
Fix available
ghostscript-tools-dvipdf fixed in 9.27-19.el8_10
Oct 15, 2026 · OSV.dev
Fix available
ghostscript-tools-fonts fixed in 9.27-19.el8_10
Oct 15, 2026 · OSV.dev
Fix available
ghostscript-tools-printing fixed in 9.27-19.el8_10
Oct 15, 2026 · OSV.dev
Fix available
ghostscript-x11 fixed in 9.27-19.el8_10
Oct 15, 2026 · OSV.dev
Fix available
libgs fixed in 9.27-19.el8_10
Oct 15, 2026 · OSV.dev
Fix available
libgs-devel fixed in 9.27-19.el8_10
Oct 15, 2026 · OSV.dev
Updated
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (CVE-2026-101258) * ghostscript: ghostscript: stack-based buffer overfl
Affected
- AlmaLinux:8 ghostscript0 → 9.27-19.el8_10
- AlmaLinux:8 ghostscript-doc0 → 9.27-19.el8_10
- AlmaLinux:8 ghostscript-tools-dvipdf0 → 9.27-19.el8_10
- AlmaLinux:8 ghostscript-tools-fonts0 → 9.27-19.el8_10
- AlmaLinux:8 ghostscript-tools-printing0 → 9.27-19.el8_10
- AlmaLinux:8 ghostscript-x110 → 9.27-19.el8_10
- AlmaLinux:8 libgs0 → 9.27-19.el8_10
- AlmaLinux:8 libgs-devel0 → 9.27-19.el8_10