ELSA-2026-83551

ELSA-2026-83551 - ghostscript security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-15

Description

[10.02.1-16.3]
- CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow
in pdfwrite via crafted font data

[10.02.1-16.2]
- CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free
bypass via Type 5 shading OOB write and procedure-stream use-after-free

Related CVEs

CVE-2026-101258

CVE-2026-103226

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	ghostscript-10.02.1-16.el10_2.3.src.rpm	0af15ad453219906599a3d36494acfb1ea45951ad609cb0f5df3e79fb34d5b61	-	ol10_aarch64_appstream
	ghostscript-10.02.1-16.el10_2.3.src.rpm	0af15ad453219906599a3d36494acfb1ea45951ad609cb0f5df3e79fb34d5b61	-	ol10_aarch64_codeready_builder
	ghostscript-10.02.1-16.el10_2.3.aarch64.rpm	efd806d897782d191b302c589f8cc8393e9ba3f6e619ac77c943f1dbb7fb0624	-	ol10_aarch64_appstream
	ghostscript-doc-10.02.1-16.el10_2.3.noarch.rpm	17374e1c4382932632ef29916b02afb24a41750cda27c8c5ffb763620d8d5242	-	ol10_aarch64_appstream
	ghostscript-tools-dvipdf-10.02.1-16.el10_2.3.noarch.rpm	8441433d13b2808fa1149aa45681620b3650ee72d26f4f22a2dbd6e56c696f3c	-	ol10_aarch64_codeready_builder
	ghostscript-tools-fonts-10.02.1-16.el10_2.3.noarch.rpm	89dc3cccd12ec0b77e7d6d0d6330c7c6f0fdda0c20b877794c1af9fada484e45	-	ol10_aarch64_appstream
	ghostscript-tools-printing-10.02.1-16.el10_2.3.noarch.rpm	a400e919a23c37b567564e937441a0d1e3063e59c6a7256f892141222391d980	-	ol10_aarch64_appstream
	libgs-10.02.1-16.el10_2.3.aarch64.rpm	6401f4b241c631d55c4d7c5b12cf354bb43639d29a5720e84361c2ddca7274dc	-	ol10_aarch64_appstream
	libgs-devel-10.02.1-16.el10_2.3.aarch64.rpm	6f7bc1c8311b007053687698661b66bae1f9c4ea3e5464a35e9ffa8de0b13c8d	-	ol10_aarch64_codeready_builder
Oracle Linux 10 (x86_64)	ghostscript-10.02.1-16.el10_2.3.src.rpm	0af15ad453219906599a3d36494acfb1ea45951ad609cb0f5df3e79fb34d5b61	-	ol10_x86_64_appstream
	ghostscript-10.02.1-16.el10_2.3.src.rpm	0af15ad453219906599a3d36494acfb1ea45951ad609cb0f5df3e79fb34d5b61	-	ol10_x86_64_codeready_builder
	ghostscript-10.02.1-16.el10_2.3.x86_64.rpm	a3a7529295c9caa7a5fa4af00c27e9b92c07495e1a503645bb68e1724ad3b8fb	-	ol10_x86_64_appstream
	ghostscript-doc-10.02.1-16.el10_2.3.noarch.rpm	17374e1c4382932632ef29916b02afb24a41750cda27c8c5ffb763620d8d5242	-	ol10_x86_64_appstream
	ghostscript-tools-dvipdf-10.02.1-16.el10_2.3.noarch.rpm	8441433d13b2808fa1149aa45681620b3650ee72d26f4f22a2dbd6e56c696f3c	-	ol10_x86_64_codeready_builder
	ghostscript-tools-fonts-10.02.1-16.el10_2.3.noarch.rpm	89dc3cccd12ec0b77e7d6d0d6330c7c6f0fdda0c20b877794c1af9fada484e45	-	ol10_x86_64_appstream
	ghostscript-tools-printing-10.02.1-16.el10_2.3.noarch.rpm	a400e919a23c37b567564e937441a0d1e3063e59c6a7256f892141222391d980	-	ol10_x86_64_appstream
	libgs-10.02.1-16.el10_2.3.x86_64.rpm	0b9d3f4f813b79cd64d7caac9fb551f2eef70081697e6a92e49d05a280ef6a67	-	ol10_x86_64_appstream
	libgs-devel-10.02.1-16.el10_2.3.x86_64.rpm	29804ab77723e7b61234525730de193aa3f7b337e4f2d90b989628df49b1d1e6	-	ol10_x86_64_codeready_builder

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team