USN-8949-1

Rick de Jager discovered that Ghostscript incorrectly handled memory under certain circumstances when processing PostScript documents. If a user or automated system were tricked into processing a specially crafted document, an attacker could possibly use this issue to bypass the sandbox and execute arbitrary code. (CVE-2026-101258) It was discovered that Ghostscript incorrectly handled memory when converting certain fonts. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to cause Ghostscript to crash, or possibly execute arbitrary code. (CVE-2026-103226) Paulos Yibelo discovered that Ghostscript did not properly validate certain operands when loading fonts. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to bypass the sandbox and execute arbitrary code. (No CVE number) Update Instructions: Run `sudo pro fix USN-8949-1` to fix the vulnerability. The problem can be corrected by updating your system to the following package versions: ghostscript - 10.02.1~dfsg1-0ubuntu7.10 libgs-common - 10.02.1~dfsg1-0ubuntu7.10 libgs10 - 10.02.1~dfsg1-0ubuntu7.10 libgs10-common - 10.02.1~dfsg1-0ubuntu7.10 No subscription required

Upstream Advisory

• View official advisory

Affected Packages

• ghostscript 10.02.1~dfsg1-0ubuntu7.10-10.02.1~dfsg1-0ubuntu7.10

• libgs-common 10.02.1~dfsg1-0ubuntu7.10-10.02.1~dfsg1-0ubuntu7.10

• libgs10 10.02.1~dfsg1-0ubuntu7.10-10.02.1~dfsg1-0ubuntu7.10

• libgs10-common 10.02.1~dfsg1-0ubuntu7.10-10.02.1~dfsg1-0ubuntu7.10

• ghostscript 9.55.0~dfsg1-0ubuntu5.15-9.55.0~dfsg1-0ubuntu5.15

• ghostscript-x 9.55.0~dfsg1-0ubuntu5.15-9.55.0~dfsg1-0ubuntu5.15

• libgs9 9.55.0~dfsg1-0ubuntu5.15-9.55.0~dfsg1-0ubuntu5.15

• libgs9-common 9.55.0~dfsg1-0ubuntu5.15-9.55.0~dfsg1-0ubuntu5.15

• ghostscript 10.07.1~dfsg-1ubuntu2.1-10.07.1~dfsg-1ubuntu2.1

• libgs-common 10.07.1~dfsg-1ubuntu2.1-10.07.1~dfsg-1ubuntu2.1

• libgs10 10.07.1~dfsg-1ubuntu2.1-10.07.1~dfsg-1ubuntu2.1

• libgs10-common 10.07.1~dfsg-1ubuntu2.1-10.07.1~dfsg-1ubuntu2.1

• ghostscript 10.06.0~dfsg-3ubuntu1.2-10.06.0~dfsg-3ubuntu1.2

• libgs-common 10.06.0~dfsg-3ubuntu1.2-10.06.0~dfsg-3ubuntu1.2

• libgs10 10.06.0~dfsg-3ubuntu1.2-10.06.0~dfsg-3ubuntu1.2

• libgs10-common 10.06.0~dfsg-3ubuntu1.2-10.06.0~dfsg-3ubuntu1.2

• ghostscript 9.50~dfsg-5ubuntu4.15+esm3-9.50~dfsg-5ubuntu4.15+esm3

• ghostscript-x 9.50~dfsg-5ubuntu4.15+esm3-9.50~dfsg-5ubuntu4.15+esm3

• libgs9 9.50~dfsg-5ubuntu4.15+esm3-9.50~dfsg-5ubuntu4.15+esm3

• libgs9-common 9.50~dfsg-5ubuntu4.15+esm3-9.50~dfsg-5ubuntu4.15+esm3