Home / mailings

PDF

[USN-8791-1] Ghostscript vulnerability

Posted on 21 September 2026
Ubuntu Security

==========================================================================Ubuntu Security Notice USN-8791-1
September 21, 2026

ghostscript vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

Ghostscript could be made to crash or run programs as your login if it
opened a specially crafted file.

Software Description:
- ghostscript: PostScript and PDF interpreter

Details:

It was discovered that Ghostscript incorrectly handled JPEG 2000 image
components with mismatched subsampling factors. An attacker could
possibly use this issue to cause Ghostscript to crash or execute
arbitrary code if it opened a specially crafted file.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
ghostscript 10.06.0~dfsg-3ubuntu1.1
libgs10 10.06.0~dfsg-3ubuntu1.1

Ubuntu 24.04 LTS
ghostscript 10.02.1~dfsg1-0ubuntu7.9
libgs10 10.02.1~dfsg1-0ubuntu7.9

Ubuntu 22.04 LTS
ghostscript 9.55.0~dfsg1-0ubuntu5.14
libgs9 9.55.0~dfsg1-0ubuntu5.14

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-8791-1
CVE-2026-39919

Package Information:
https://launchpad.net/ubuntu/+source/ghostscript/10.06.0~dfsg-3ubuntu1.1
https://launchpad.net/ubuntu/+source/ghostscript/10.02.1~dfsg1-0ubuntu7.9
https://launchpad.net/ubuntu/+source/ghostscript/9.55.0~dfsg1-0ubuntu5.14

--===============2240719672784851629==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature

 

TOP