ELSA-2026-83552

Type: Security

Severity: Important

Published: 2026-10-15

Oracle Linux 8

[9.27-19] - CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free via Type 5 shading OOB write and procedure-stream use-after-free - CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data overflow in pdfwrite via crafted font data

Evidence and freshness

Data current

Last supporting evidence check: 2026-10-24T23:03:11.833Z UTC

Official vendor advisory

Oracle Linux 8

View source

Observed 2026-10-24T23:03:11.833Z UTC. Last updated 2026-10-16T00:08:59.358Z UTC.

Upstream Advisory

View official advisory

Affected Packages

ghostscript 9.27-19.el8_10
ghostscript-doc 9.27-19.el8_10
ghostscript-tools-dvipdf 9.27-19.el8_10
ghostscript-tools-fonts 9.27-19.el8_10
ghostscript-tools-printing 9.27-19.el8_10
ghostscript-x11 9.27-19.el8_10
libgs 9.27-19.el8_10
libgs-devel 9.27-19.el8_10

Interested in being alerted when there are new versions of ghostscript, etc? Set up an alert.