Moderate: ghostscript security update
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter (CVE-2026-39919) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
ALSA-2026:74464
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:ALSA-2026:74464
ghostscript
Source reference: /affected/0/package/name
- Affected versions
- Not stated in this record
- Fixed versions
- 10.02.1-16.el10_2.1
Source reference:
/affected/0/ranges - Prerequisites
- Not stated in this record
ghostscript-doc
Source reference: /affected/1/package/name
- Affected versions
- Not stated in this record
- Fixed versions
- 10.02.1-16.el10_2.1
Source reference:
/affected/1/ranges - Prerequisites
- Not stated in this record
ghostscript-tools-dvipdf
Source reference: /affected/2/package/name
- Affected versions
- Not stated in this record
- Fixed versions
- 10.02.1-16.el10_2.1
Source reference:
/affected/2/ranges - Prerequisites
- Not stated in this record
ghostscript-tools-fonts
Source reference: /affected/3/package/name
- Affected versions
- Not stated in this record
- Fixed versions
- 10.02.1-16.el10_2.1
Source reference:
/affected/3/ranges - Prerequisites
- Not stated in this record
ghostscript-tools-printing
Source reference: /affected/4/package/name
- Affected versions
- Not stated in this record
- Fixed versions
- 10.02.1-16.el10_2.1
Source reference:
/affected/4/ranges - Prerequisites
- Not stated in this record
libgs
Source reference: /affected/5/package/name
- Affected versions
- Not stated in this record
- Fixed versions
- 10.02.1-16.el10_2.1
Source reference:
/affected/5/ranges - Prerequisites
- Not stated in this record
libgs-devel
Source reference: /affected/6/package/name
- Affected versions
- Not stated in this record
- Fixed versions
- 10.02.1-16.el10_2.1
Source reference:
/affected/6/ranges - Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "10.02.1-16.el10_2.1"
}
]
}
],
"package": {
"name": "ghostscript",
"purl": "pkg:rpm/almalinux/ghostscript",
"ecosystem": "AlmaLinux:10"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:74464.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "10.02.1-16.el10_2.1"
}
]
}
],
"package": {
"name": "ghostscript-doc",
"purl": "pkg:rpm/almalinux/ghostscript-doc",
"ecosystem": "AlmaLinux:10"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:74464.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "10.02.1-16.el10_2.1"
}
]
}
],
"package": {
"name": "ghostscript-tools-dvipdf",
"purl": "pkg:rpm/almalinux/ghostscript-tools-dvipdf",
"ecosystem": "AlmaLinux:10"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:74464.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "10.02.1-16.el10_2.1"
}
]
}
],
"package": {
"name": "ghostscript-tools-fonts",
"purl": "pkg:rpm/almalinux/ghostscript-tools-fonts",
"ecosystem": "AlmaLinux:10"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:74464.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "10.02.1-16.el10_2.1"
}
]
}
],
"package": {
"name": "ghostscript-tools-printing",
"purl": "pkg:rpm/almalinux/ghostscript-tools-printing",
"ecosystem": "AlmaLinux:10"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:74464.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "10.02.1-16.el10_2.1"
}
]
}
],
"package": {
"name": "libgs",
"purl": "pkg:rpm/almalinux/libgs",
"ecosystem": "AlmaLinux:10"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:74464.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "10.02.1-16.el10_2.1"
}
]
}
],
"package": {
"name": "libgs-devel",
"purl": "pkg:rpm/almalinux/libgs-devel",
"ecosystem": "AlmaLinux:10"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:74464.json"
}
}
]Publisher severity
No explicit severity was provided.
- Event
- #68031 · Revision 1
- Added to Heist Feed
- Publisher date