Moderate: ghostscript security update
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter (CVE-2026-39919) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
RLSA-2026:74457
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:RLSA-2026:74457
ghostscript
Source reference: /affected/0/package/name
- Affected versions
- Not stated in this record
- Fixed versions
- 0:9.54.0-19.el9_8.1
Source reference:
/affected/0/ranges - Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:9.54.0-19.el9_8.1"
}
],
"database_specific": {
"yum_repository": "AppStream"
}
}
],
"package": {
"name": "ghostscript",
"purl": "pkg:rpm/rocky-linux/ghostscript?distro=rocky-linux-9&epoch=0",
"ecosystem": "Rocky Linux:9"
},
"database_specific": {
"source": "https://storage.googleapis.com/resf-osv-data/RLSA-2026:74457.json"
}
}
]- Related CVEs
- CVE-2026-39919
Source reference:
/upstream
Publisher severity
high
Source reference: /severity/0/score
- Event
- #75220 · Revision 1
- Added to Heist Feed
- Publisher date