Critical Security Update for Ghostscript: CVE-2026-101258 and CVE-2026-103226
Summary
RHSA-2026:83553: Red Hat Security Advisory: ghostscript security update. Affects ghostscript versions < 0:9.54.0-19.el9_8.3. Fixed in 0:9.54.0-19.el9_8.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Ghostscript is an interpreter for the PostScript language and for PDF. It is widely used for processing and rendering documents in various formats. The package is essential for applications that require document conversion and printing capabilities. However, recent vulnerabilities have been identified that could potentially compromise the security of systems utilizing Ghostscript.
Vulnerability Detail
The vulnerabilities identified as CVE-2026-101258 and CVE-2026-103226 could allow an attacker to exploit the Ghostscript package, leading to unauthorized access and manipulation of sensitive data. These vulnerabilities arise from improper handling of certain inputs, which could result in a denial of service or data leakage. The potential ramifications include severe impacts on confidentiality, integrity, and availability of the affected systems.
How To Fix
Minimum fixed version
0:9.54.0-19.el9_8.3
This is the first release that contains the fix.
sudo dnf update ghostscriptTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate updating is not feasible, consider restricting access to the Ghostscript service or using alternative document processing tools until the update can be applied.
Conclusion
The identified vulnerabilities in Ghostscript pose significant risks to system security. It is crucial to update to the latest patched version to safeguard against potential exploits. Regular monitoring and vulnerability management practices, such as using tools like Vulert, can help maintain the security of your applications.
See every vulnerability recorded for ghostscript →
FAQ
These are identifiers for specific vulnerabilities found in the Ghostscript package that could lead to security breaches.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
The CVSS score for these vulnerabilities is 7.8, indicating a high severity level.
Consider implementing access restrictions to the Ghostscript service as a temporary workaround until you can apply the update.
Detailed information can be found in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2026:83553.json.
Related vulnerabilities
Recent vulnerabilities recorded for ghostscript.
