High ELSA-2026-93978 1 CVE

Important: ghostscript security update (Oracle Linux 8)

Published Nov 2, 2026 · Updated Nov 2, 2026

Ecosystem: Oracle Linux

Summary

[9.27-20]
- CVE-2026-112177 ghostscript: Reintroduction of .charkeys -dSAFER bypass in RHEL 8
-dSAFER bypass in RHEL 8

Fixed packages 8

Release	Package	Fixed in
Oracle Linux · 8	ghostscript	0:9.27-20.el8_10
Oracle Linux · 8	ghostscript-doc	0:9.27-20.el8_10
Oracle Linux · 8	ghostscript-tools-dvipdf	0:9.27-20.el8_10
Oracle Linux · 8	ghostscript-tools-fonts	0:9.27-20.el8_10
Oracle Linux · 8	ghostscript-tools-printing	0:9.27-20.el8_10
Oracle Linux · 8	ghostscript-x11	0:9.27-20.el8_10
Oracle Linux · 8	libgs	0:9.27-20.el8_10
Oracle Linux · 8	libgs-devel	0:9.27-20.el8_10

Vulnerabilities 1

High 7.3

CVE-2026-112177

Ghostscript: reintroduction of .charkeys -dsafer bypass in rhel 8

A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitted during the rebase from version 9.25 to 9.27, leaving privileged .forceput operations in the .charkeys procedure insufficiently protected.…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux

Oct 20, 2026