Skip to content
OpenAdvisories
Critical RHSA-2026:76877 1 CVE

Red Hat Security Advisory: ghostscript security update

Published Oct 7, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream ghostscript 0:9.27-18.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream libgs 0:9.27-18.el8_10

Vulnerabilities 1

  • Critical 9.8
    CVE-2026-39919

    Ghostscript < 10.08.0 Heap Buffer Overflow via JPEG 2000 Output Adapter

    Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter (base/sjpx_openjpeg.c) that allows attackers to cause memory corruption by supplying a crafted PDF containing a JPEG 2000 image with mismatched comp…

    Artifex Ghostscript ghostscript ghostscript Debian Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2533857
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_76877.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-39919
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-39919
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-39919
  • article
    https://bugs.ghostscript.com/show_bug.cgi?id=709666
  • article
    https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/tag/gs10080
  • article
    https://github.com/ArtifexSoftware/ghostpdl/commit/0a8bf88e39db07b0751a58d6ec1cf992073e4dc1
  • article
    https://www.vulncheck.com/advisories/ghostscript-heap-buffer-overflow-via-jpeg-2000-output-adapter