Skip to content
OpenAdvisories
High RHSA-2026:83552 2 CVEs

Red Hat Security Advisory: ghostscript security update

Published Oct 16, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream ghostscript 0:9.27-19.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream libgs 0:9.27-19.el8_10

Vulnerabilities 2

  • High 7.8
    CVE-2026-101258

    Ghostscript: ghostscript: -dsafer sandbox bypass via type 5 shading oob write and procedure-stream use-after-free

    A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript process. The issue chains memory corruption in document pa…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  • Medium 6.3
    CVE-2026-103226

    Artifex Ghostscript Pdfwrite gdevpsfx.c type1_callsubr stack-based overflow

    A vulnerability was identified in Artifex Ghostscript up to 10.07.0. Affected is the function type1_callsubr of the file devices/vector/gdevpsfx.c of the component Pdfwrite. The manipulation leads to stack-based buffer overflow. Remote exploitation of the att…

    Artifex Ghostscript ghostscript ghostscript Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2542396
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2543939
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_83552.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-101258
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-101258
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-101258
  • article
    https://github.com/v12-security/pocs/tree/main/ghostscript
  • report
    https://access.redhat.com/security/cve/CVE-2026-103226
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-103226
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-103226
  • article
    https://artifex.com/
  • article
    https://bugs.ghostscript.com/attachment.cgi?id=28495
  • article
    https://bugs.ghostscript.com/show_bug.cgi?id=709672
  • article
    https://bugs.ghostscript.com/show_bug.cgi?id=709672#c3
  • article
    https://vuldb.com/cve/CVE-2026-103226
  • article
    https://vuldb.com/submit/955016
  • article
    https://vuldb.com/vuln/411906
  • article
    https://vuldb.com/vuln/411906/cti