[CLSA-2026:1791311110] ghostscript: Fix of CVE-2026-103226
Type:
security
Severity:
Moderate
Release date:
2026-10-06 18:25:20 UTC
Description:
- Rebase to ghostscript-9.54.0-19.el9_8.1; CVE-2026-39919 fixed by vendor - CVE-2026-103226: bound the control stack in the Type 1 to Type 2 font conversion used by pdfwrite - CVE-2025-27830: count every $Blend procedure entry in the length and bound the formatting of its numbers so the serialized procedure cannot overflow its buffer (upstream Bug 706923 and gs_snprintf)
CVEs fixed:
Updated packages:
  • ghostscript-9.54.0-19.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:cb764f18e47c660f59219b0efef9b996d89cb6e826fcf1c90069257f1215cdb8
  • ghostscript-9.54.0-19.el9_8.1.tuxcare.els1.i686.rpm
    sha:2412a34a5b34e48c075e883bdc99f9b97e93058fde20ed3644236542bf2c7cb4
  • ghostscript-9.54.0-19.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:397f8e3c04af903d2ab08fcd4c9068ed80a172146fdff0cf861535b933d9d2ec
  • ghostscript-doc-9.54.0-19.el9_8.1.tuxcare.els1.noarch.rpm
    sha:9de0f4d4401923f9a5188ee8da0695f3061d6c0ba8f057c6b0dae0d35e32951e
  • ghostscript-gtk-9.54.0-19.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:a2530fb226605603a572052263512fa2fc261e21c6e86a8a4703d61c04f10807
  • ghostscript-gtk-9.54.0-19.el9_8.1.tuxcare.els1.i686.rpm
    sha:d4d6b10265576b57976efd8f5f0146a201c5b0c385e0ce0d74262dfd23a53a7a
  • ghostscript-gtk-9.54.0-19.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:b35693aebc2d6b5c9ca4e23ce1fa8b3c9761d07f58180cf6ac06101d0c5b44ae
  • ghostscript-tools-dvipdf-9.54.0-19.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:d8fff4cf728179bd2597915340c6eef0a5d52dabc0404106a6afba08e8d0a1a1
  • ghostscript-tools-dvipdf-9.54.0-19.el9_8.1.tuxcare.els1.i686.rpm
    sha:6b81b4ecad6ae90b08f4ded0dfc6357c9780b4f178cb4a7a5c8dabff0d649047
  • ghostscript-tools-dvipdf-9.54.0-19.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:ab90e3c451e9dd6bb447e95068dc1302263edebd09d5356294f3e852d14e0fc2
  • ghostscript-tools-fonts-9.54.0-19.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:d0e22daf293ba55503bb337eef628260b2e0c188819f5c19acccf19799f2b6b3
  • ghostscript-tools-fonts-9.54.0-19.el9_8.1.tuxcare.els1.i686.rpm
    sha:925112ad8a3c614d4f740e401260d4774d8c2d8b75f9a05d1e9f05b710e0372c
  • ghostscript-tools-fonts-9.54.0-19.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:a747cc72866ddfb07a2bae7f28134e7fcb53be4559ef8d90830d6d806ad8c405
  • ghostscript-tools-printing-9.54.0-19.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:75ef93bfb992367c8c13843bbe458a1baa0deeda1edc701dc3d9ffdf6549ffc1
  • ghostscript-tools-printing-9.54.0-19.el9_8.1.tuxcare.els1.i686.rpm
    sha:a645d1df52755a5eaaf10e9e9a54faed1bbf9fcd2e3a7951fb65d29052c0049c
  • ghostscript-tools-printing-9.54.0-19.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:09992f07d0bf79aade77549a4d2deb7a04e06fa68cc2f0283b16b425877a28b0
  • ghostscript-x11-9.54.0-19.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:c71e66e6bc1a244ca9bad098bb7d49c29cfcd27880e00f04f39757e81bc5bc64
  • ghostscript-x11-9.54.0-19.el9_8.1.tuxcare.els1.i686.rpm
    sha:5198254d25e74e4dc11b070f992d3a58cbbb4f77e3cef8f95a7242959ff83ef4
  • ghostscript-x11-9.54.0-19.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:4fce4e42c133af8dcd7cdce4b9162373b3f38e6d68d87b225bf2c6e4d1303357
  • libgs-9.54.0-19.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:8594d1b1a671c9194a1d1fdd6996b1e7c1d99f7c94fd976964555cb62409650e
  • libgs-9.54.0-19.el9_8.1.tuxcare.els1.i686.rpm
    sha:40137694ff3138dbecf10f8757245308b88cc192e96dde80b0f0f1f120432320
  • libgs-9.54.0-19.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:25247cfa14a880c60f453cd62fc433f12f645283010729d0cbbc0ef796610fce
  • libgs-devel-9.54.0-19.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:05474dacbfe352a0c89e4c32a32a15f453f731af01e434b28a765e1c652a41f6
  • libgs-devel-9.54.0-19.el9_8.1.tuxcare.els1.i686.rpm
    sha:92f27d898dfdeb518ec5b600c0bf422c3aa453e586de71cab7f79e4528399697
  • libgs-devel-9.54.0-19.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:93533e71c0cd33d3cc030536e460b8fe9f78efb38367265f7afd59696ed672ee
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.