UbuntuUpdates.org

Package "libgs10-common"

Name: libgs10-common

Description:

interpreter for the PostScript language and for PDF - common files
Latest version: 10.06.0~dfsg-3ubuntu1.2
Release: resolute (26.04)
Level: updates
Repository: main
Head package: ghostscript
Homepage: https://www.ghostscript.com/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libgs10-common"

All arch deb package
APT INSTALL

Other versions of "libgs10-common" in Resolute

Repository Area Version
base main 10.06.0~dfsg-3ubuntu1
security main 10.06.0~dfsg-3ubuntu1.2

Changelog

Version: 10.06.0~dfsg-3ubuntu1.2 2026-10-21 19:19:26 UTC

ghostscript (10.06.0~dfsg-3ubuntu1.2) resolute-security; urgency=medium

  * SECURITY UPDATE: -dSAFER bypass via use-after-free and heap buffer overflow
    - debian/patches/CVE-2026-101258-1.patch: copy the string returned by a
      procedure data source into global VM so a restore cannot leave a
      dangling pointer in psi/zfproc.c.
    - debian/patches/CVE-2026-101258-2.patch: validate that shading /Function
      array members produce exactly one output in base/gsshade.c.
    - CVE-2026-101258
  * SECURITY UPDATE: stack-based buffer overflow in pdfwrite Type 1 font
    conversion
    - debian/patches/CVE-2026-103226.patch: check there is space on the control
      stack before handling a subroutine call in devices/vector/gdevpsfx.c.
    - CVE-2026-103226
  * SECURITY UPDATE: -dSAFER bypass via missing operand validation in
    .putgstringcopy (LP: #2171528)
    - debian/patches/lp2171528.patch: verify operand types so an error handler
      cannot reach .forceput in Resource/Init/gs_fonts.ps.
    - No CVE number

 -- Charles Cochran Tue, 20 Oct 2026 12:40:15 -0400
Source diff to previous version
2171528 Type 1 font-loader `.forceput` save/restore UAF yields native read/write and controlled dispatch/RCE under `-dSAFER`
CVE-2026-101258 A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitra
CVE-2026-103226 A vulnerability was identified in Artifex Ghostscript up to 10.07.0. Affected is the function type1_callsubr of the file devices/vector/gdevpsfx.c of

Version: 10.06.0~dfsg-3ubuntu1.1 2026-09-21 19:07:57 UTC

ghostscript (10.06.0~dfsg-3ubuntu1.1) resolute-security; urgency=medium

  * SECURITY UPDATE: heap overflow in JPEG 2000 output adapter
    - debian/patches/CVE-2026-39919.patch: OpenJPEG - Fix overreading bytes in
      some conditions in base/sjpx_openjpeg.c.
    - CVE-2026-39919

 -- Marc Deslauriers Fri, 18 Sep 2026 13:43:41 -0400
CVE-2026-39919 Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter (base/sjpx_openjpeg.c) that allows att


About   -   Send Feedback to @ubuntu_updates