[CLSA-2026:1791294114] ghostscript: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-06 13:42:05 UTC
Description:
- CVE-2026-39919: fix heap buffer overflow in the JPEG 2000 output adapter when components are subsampled below 8 bits per sample - CVE-2026-103226: bound the control stack in the Type 1 to Type 2 font conversion used by pdfwrite - CVE-2025-27830: count every $Blend procedure entry in the length and bound the formatting of its numbers so the serialized procedure cannot overflow its buffer (upstream Bug 706923 and gs_snprintf)
CVEs fixed:
Updated packages:
  • ghostscript-9.54.0-19.el9_6.tuxcare.els7.aarch64.rpm
    sha:d2e7ce644242f625374007a07c0e8430c38d25db84200899a19822e29ce0e13f
  • ghostscript-9.54.0-19.el9_6.tuxcare.els7.i686.rpm
    sha:75dcf77196b60b13fc38dbdc9cb928798400fce9387d3cab89a4e11f2ff47dea
  • ghostscript-9.54.0-19.el9_6.tuxcare.els7.x86_64.rpm
    sha:4fb99f57e6b08cdcf535bec5d7b656c7f845da6a903ccc92ca423d096fb9eb01
  • ghostscript-doc-9.54.0-19.el9_6.tuxcare.els7.noarch.rpm
    sha:31446dd7148203ff1a80197cfbbda0cd3bcae756eb80d0059ba37e169cec2362
  • ghostscript-gtk-9.54.0-19.el9_6.tuxcare.els7.aarch64.rpm
    sha:903ead9af91375fe8ac39f0829eb82249309370121d44c709a21a6291ce86a52
  • ghostscript-gtk-9.54.0-19.el9_6.tuxcare.els7.i686.rpm
    sha:dd396e99ec343164af63f6c2407f2f091c8cbad8d968de868c15f959619cf807
  • ghostscript-gtk-9.54.0-19.el9_6.tuxcare.els7.x86_64.rpm
    sha:c7b822bf7465111a92c900924bf65ace1eae3ac7964dd2d75be435f0bce80946
  • ghostscript-tools-dvipdf-9.54.0-19.el9_6.tuxcare.els7.aarch64.rpm
    sha:0cd5e057cc67eb92ddbbe319a426dc5d2bf722a1c0df36bdab7443466aef4e8f
  • ghostscript-tools-dvipdf-9.54.0-19.el9_6.tuxcare.els7.i686.rpm
    sha:417216610f0a305f1dfe7a897a9e0c16521107df812cec317d019bf206bcb30f
  • ghostscript-tools-dvipdf-9.54.0-19.el9_6.tuxcare.els7.x86_64.rpm
    sha:cf40ef3b01e4ef1259ec45c5140092154a78f534a38cd5b8aaa840c6ad7f57fc
  • ghostscript-tools-fonts-9.54.0-19.el9_6.tuxcare.els7.aarch64.rpm
    sha:e8a436c39369a40728e8973e26e4868e0f3650e0c2ec8a54be09b55c2a765b0b
  • ghostscript-tools-fonts-9.54.0-19.el9_6.tuxcare.els7.i686.rpm
    sha:19ef5f2a702169ed3aa56b5b77a1ce35f7d125b88703ab2b2e2a7c6e579b2511
  • ghostscript-tools-fonts-9.54.0-19.el9_6.tuxcare.els7.x86_64.rpm
    sha:eca839a767e92a6724967fb6c8aca66665cb455d255c0bbe0eaae0827e0ff393
  • ghostscript-tools-printing-9.54.0-19.el9_6.tuxcare.els7.aarch64.rpm
    sha:dc1dc8142e974495ef0f25be0a6a325aa5371917cf375cd80ab4e3f2a8883e35
  • ghostscript-tools-printing-9.54.0-19.el9_6.tuxcare.els7.i686.rpm
    sha:aa3fce410ad6306ef671a01fd301619433cdd81f13a1afe277a2f60d40240c96
  • ghostscript-tools-printing-9.54.0-19.el9_6.tuxcare.els7.x86_64.rpm
    sha:90c06fd26d18fe5a251885ddae998e9d29e468fd203b715a988ddb32c1b60e1e
  • ghostscript-x11-9.54.0-19.el9_6.tuxcare.els7.aarch64.rpm
    sha:f994bb9ed79d944885033feb12ef8c1fef15d24f580367d27700f4d6b1a59205
  • ghostscript-x11-9.54.0-19.el9_6.tuxcare.els7.i686.rpm
    sha:0cbb1fadfdb444ee670b95fee6a455683c6b1efa6c9ff1f80c9307eb0b294892
  • ghostscript-x11-9.54.0-19.el9_6.tuxcare.els7.x86_64.rpm
    sha:e3558b2c7339e0ca2029827d5306a11d93c54d7a90cd1e95a47a1f437315f059
  • libgs-9.54.0-19.el9_6.tuxcare.els7.aarch64.rpm
    sha:4bb54a958bc85f3e7d288c79a995ffe4854223a9d74ab6b62529d1a0460ba7f4
  • libgs-9.54.0-19.el9_6.tuxcare.els7.i686.rpm
    sha:cc1c71929aae4eaff6462817a2e679e33e258c48af8685ab2afa757b032f1d2f
  • libgs-9.54.0-19.el9_6.tuxcare.els7.x86_64.rpm
    sha:542bb8788e296fdc41dc508f4ffd163ba25501ddee21ecc552dea74aff3f3e21
  • libgs-devel-9.54.0-19.el9_6.tuxcare.els7.aarch64.rpm
    sha:10c4de7fccee1aadf4c2771bf0b0ae2e87380d2d56d02c6e88cbee73333aead4
  • libgs-devel-9.54.0-19.el9_6.tuxcare.els7.i686.rpm
    sha:1b5d351f89a4819d03db6b34efc92067d0fe20cc8ec660188de1623dee33e451
  • libgs-devel-9.54.0-19.el9_6.tuxcare.els7.x86_64.rpm
    sha:080109f38a1d6646865a0b3ccb6ea8d1ce4bdad7ca732cf03238db914507126c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.