ELSA-2026-83551

Type: Security

Severity: Important

Published: 2026-10-15

Oracle Linux 10

[10.02.1-16.3] - CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data [10.02.1-16.2] - CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free bypass via Type 5 shading OOB write and procedure-stream use-after-free

Evidence and freshness

Data current

Last supporting evidence check: 2026-10-20T10:29:35.826Z UTC

Official vendor advisory

Oracle Linux 10

View source

Observed 2026-10-20T10:29:35.826Z UTC. Last updated 2026-10-15T16:21:12.296Z UTC.

Upstream Advisory

View official advisory

Affected Packages

ghostscript-tools-dvipdf 10.02.1-16.el10_2.3
ghostscript-tools-fonts 10.02.1-16.el10_2.3
ghostscript 10.02.1-16.el10_2.3
ghostscript-doc 10.02.1-16.el10_2.3
ghostscript-tools-printing 10.02.1-16.el10_2.3
libgs 10.02.1-16.el10_2.3
libgs-devel 10.02.1-16.el10_2.3

Interested in being alerted when there are new versions of ghostscript-tools-dvipdf, etc? Set up an alert.