Critical Security Update for libgs: Ghostscript Vulnerability CVE-2026-39919
Summary
RHSA-2026:74464: Red Hat Security Advisory: ghostscript security update. Affects libgs versions < 0:10.02.1-16.el10_2.1. Fixed in 0:10.02.1-16.el10_2.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libgs is a core component of the Ghostscript suite, which is widely used for processing and rendering PostScript and PDF files. It provides essential functionalities for converting and displaying these file formats across various applications. Given its extensive use, any vulnerabilities within libgs can have significant implications for security and data integrity.
Vulnerability Detail
The vulnerability identified as CVE-2026-39919 in libgs allows for potential unauthorized access and manipulation of sensitive data. This issue arises from improper handling of certain inputs, which could lead to memory corruption and arbitrary code execution. Attackers exploiting this vulnerability could gain control over affected systems, leading to data breaches and service disruptions.
How To Fix
Minimum fixed version
0:10.02.1-16.el10_2.1
This is the first release that contains the fix.
sudo dnf update libgsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can restrict access to the libgs component or disable features that utilize it until the package is updated. However, this is not a permanent solution and should only be used until the update can be applied.
Conclusion
The libgs vulnerability CVE-2026-39919 poses a significant risk to systems utilizing the Ghostscript suite. It is imperative to update to the latest patched version to ensure security and protect sensitive data. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for libgs →
FAQ
CVE-2026-39919 is a security vulnerability in the libgs package that could allow attackers to execute arbitrary code.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
Failure to address this vulnerability could lead to unauthorized access, data breaches, and potential system compromise.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities using just a manifest file like package-lock.json.
The CVSS score for this vulnerability is 7.8, indicating a high severity level.
Related vulnerabilities
Recent vulnerabilities recorded for libgs.
