Red Hat Security Advisory

RHSA-2026:76877

ghostscript security update

Released 2026-10-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) ghostscript-9.27-18.el8_10, libgs-9.27-18.el8_10

Fixes 1 record

TI-2026-28788 CVE-2026-39919 · GHSA-v865-hp77-22rm

Ghostscript < 10.08.0 Heap Buffer Overflow via JPEG 2000 Output Adapter

MEDIUM 50

Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter (base/sjpx_openjpeg.c) that allows attackers to cause memory corruption by supplying a crafted PDF containing…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00849 Published 2026-09-15 Partial fix · 10.08.0 CWE-122