ELSA-2026-83553

Type: Security

Severity: Important

Published: 2026-10-15

Oracle Linux 9

[9.54.0-19.3] - RHEL-273957 CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data [9.54.0-19.2] - CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free via Type 5 shading OOB write and procedure-stream use-after-free

Evidence and freshness

Data current

Last supporting evidence check: 2026-10-24T23:03:11.833Z UTC

Official vendor advisory

Oracle Linux 9

View source

Observed 2026-10-24T23:03:11.833Z UTC. Last updated 2026-10-15T23:00:25.106Z UTC.

Upstream Advisory

View official advisory

Affected Packages

ghostscript 9.54.0-19.el9_8.3
ghostscript-doc 9.54.0-19.el9_8.3
ghostscript-tools-dvipdf 9.54.0-19.el9_8.3
ghostscript-tools-fonts 9.54.0-19.el9_8.3
ghostscript-tools-printing 9.54.0-19.el9_8.3
ghostscript-x11 9.54.0-19.el9_8.3
libgs 9.54.0-19.el9_8.3
libgs-devel 9.54.0-19.el9_8.3

Interested in being alerted when there are new versions of ghostscript, etc? Set up an alert.