Skip to content
OpenAdvisories
Medium ELSA-2026-74464 1 CVE

Moderate: ghostscript security update (Oracle Linux 10)

Published Oct 1, 2026 · Updated Oct 1, 2026

Ecosystem: Oracle Linux

Summary

[10.02.1-16.1]
- RHEL-264925 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000
JPXDecode output adapter

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 10 ghostscript 0:10.02.1-16.el10_2.1
Oracle Linux · 10 ghostscript-doc 0:10.02.1-16.el10_2.1
Oracle Linux · 10 ghostscript-tools-dvipdf 0:10.02.1-16.el10_2.1
Oracle Linux · 10 ghostscript-tools-fonts 0:10.02.1-16.el10_2.1
Oracle Linux · 10 ghostscript-tools-printing 0:10.02.1-16.el10_2.1
Oracle Linux · 10 libgs 0:10.02.1-16.el10_2.1
Oracle Linux · 10 libgs-devel 0:10.02.1-16.el10_2.1

Vulnerabilities 1

  • Critical 9.8
    CVE-2026-39919

    Ghostscript < 10.08.0 Heap Buffer Overflow via JPEG 2000 Output Adapter

    Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter (base/sjpx_openjpeg.c) that allows attackers to cause memory corruption by supplying a crafted PDF containing a JPEG 2000 image with mismatched comp…

    Artifex Ghostscript ghostscript ghostscript Debian Ubuntu Alpine