UnratedFix available
Moderate: ghostscript security update
Type: advisorySources: OSV
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter (CVE-2026-39919) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Products
- ghostscript, ghostscript-doc, ghostscript-tools-dvipdf, ghostscript-tools-fonts, ghostscript-tools-printing, ghostscript-x11, libgs, libgs-devel
- Affected versions
- Not specified
- Fixed versions
- 9.27-18.el8_10
- CVEs
- Not specified
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 28 Oct 2026, 04:07 UTC · Revision 1
Source evidence
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter (CVE-2026-39919) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
osv:ALSA-2026:76877
ghostscript
Fixed versions: 9.27-18.el8_10
ghostscript-doc
Fixed versions: 9.27-18.el8_10
ghostscript-tools-dvipdf
Fixed versions: 9.27-18.el8_10
ghostscript-tools-fonts
Fixed versions: 9.27-18.el8_10
ghostscript-tools-printing
Fixed versions: 9.27-18.el8_10
ghostscript-x11
Fixed versions: 9.27-18.el8_10
libgs
Fixed versions: 9.27-18.el8_10
libgs-devel
Fixed versions: 9.27-18.el8_10
Complete source record
{
"id": "322738f9ec4f225d58b219805bca02888f8e59e923b2b27e9d75e78a529e0bc7",
"url": "https://osv.dev/vulnerability/ALSA-2026%3A76877",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Moderate: ghostscript security update",
"summary": "The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter (CVE-2026-39919) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"evidence": "osv:ALSA-2026:76877",
"products": [
{
"name": {
"value": "ghostscript",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.27-18.el8_10",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "ghostscript-doc",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.27-18.el8_10",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "ghostscript-tools-dvipdf",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.27-18.el8_10",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "ghostscript-tools-fonts",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.27-18.el8_10",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "ghostscript-tools-printing",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.27-18.el8_10",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "ghostscript-x11",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.27-18.el8_10",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libgs",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.27-18.el8_10",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libgs-devel",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.27-18.el8_10",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "ALSA-2026:76877",
"aliases": [
"ALSA-2026:76877"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "9.27-18.el8_10"
}
]
}
],
"package": {
"name": "ghostscript",
"purl": "pkg:rpm/almalinux/ghostscript",
"ecosystem": "AlmaLinux:8"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:76877.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "9.27-18.el8_10"
}
]
}
],
"package": {
"name": "ghostscript-doc",
"purl": "pkg:rpm/almalinux/ghostscript-doc",
"ecosystem": "AlmaLinux:8"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:76877.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "9.27-18.el8_10"
}
]
}
],
"package": {
"name": "ghostscript-tools-dvipdf",
"purl": "pkg:rpm/almalinux/ghostscript-tools-dvipdf",
"ecosystem": "AlmaLinux:8"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:76877.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "9.27-18.el8_10"
}
]
}
],
"package": {
"name": "ghostscript-tools-fonts",
"purl": "pkg:rpm/almalinux/ghostscript-tools-fonts",
"ecosystem": "AlmaLinux:8"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:76877.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "9.27-18.el8_10"
}
]
}
],
"package": {
"name": "ghostscript-tools-printing",
"purl": "pkg:rpm/almalinux/ghostscript-tools-printing",
"ecosystem": "AlmaLinux:8"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:76877.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "9.27-18.el8_10"
}
]
}
],
"package": {
"name": "ghostscript-x11",
"purl": "pkg:rpm/almalinux/ghostscript-x11",
"ecosystem": "AlmaLinux:8"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:76877.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "9.27-18.el8_10"
}
]
}
],
"package": {
"name": "libgs",
"purl": "pkg:rpm/almalinux/libgs",
"ecosystem": "AlmaLinux:8"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:76877.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "9.27-18.el8_10"
}
]
}
],
"package": {
"name": "libgs-devel",
"purl": "pkg:rpm/almalinux/libgs-devel",
"ecosystem": "AlmaLinux:8"
},
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:76877.json"
}
}
],
"modified": "2026-10-07T12:45:05.711212289Z",
"provider": "osv",
"references": [
"https://access.redhat.com/errata/RHSA-2026:76877",
"https://access.redhat.com/security/cve/CVE-2026-39919",
"https://bugzilla.redhat.com/2533857",
"https://errata.almalinux.org/8/ALSA-2026-76877.html"
]
},
"related_cves": [],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 95029,
"published_at": "2026-10-06T00:00:00+00:00"
}