Release date:
2026-10-05 18:51:29 UTC
Description:
* SECURITY UPDATE: heap overflow in the JPEG 2000 output adapter
- debian/patches/CVE-2026-39919.patch: stop the sub-byte-depth loop in
process_one_trunk() writing one output byte per column of a sampled
component, and reject unsupported bit depths in decode_image(), in
base/sjpx_openjpeg.c.
- CVE-2026-39919
Updated packages:
-
ghostscript_9.26~dfsg+0-0ubuntu0.18.04.18+tuxcare.els2_amd64.deb
sha:bd09d1035b997a04eb65ab82b799ab70cc93d332
-
ghostscript-doc_9.26~dfsg+0-0ubuntu0.18.04.18+tuxcare.els2_all.deb
sha:564900074f7a6ae4e7777454108cc72d1d402345
-
ghostscript-x_9.26~dfsg+0-0ubuntu0.18.04.18+tuxcare.els2_amd64.deb
sha:658c8140a239f73a12a33d562b5ece6399b31019
-
libgs-dev_9.26~dfsg+0-0ubuntu0.18.04.18+tuxcare.els2_amd64.deb
sha:1b7189e248b1c85c5c53373de1c87a6aa2cf45c0
-
libgs9_9.26~dfsg+0-0ubuntu0.18.04.18+tuxcare.els2_amd64.deb
sha:fa712e4151eb04ce6715081dde5c89c7bd674024
-
libgs9-common_9.26~dfsg+0-0ubuntu0.18.04.18+tuxcare.els2_all.deb
sha:40175fc481a6513a1a3a143835bac58a08d0fd0d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
