Ghostscript Security Update — AlmaLinux 8 (ALSA-2026:93978)

ALSA-2026:93978 updates Ghostscript on AlmaLinux 8, fixing CVE-2026-112177 in the PostScript/PDF rendering suite. Update with dnf update ghostscript on any server that processes documents headlessly — crafted PostScript or PDF input is the standard delivery channel.

High 7.3 CVSS 2026-11-02

AlmaLinux 8

Was das unter einer SharedLicense-Lizenz bedeutet

Ghostscript parses attacker-controlled PostScript and PDF content in document-conversion pipelines — flaws there convert an uploaded document into code execution inside the conversion worker.

Type:

security

Severity:

important

Release date:

2026-11-02

Description:

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* ghostscript: Reintroduction of .charkeys -dSAFER bypass in AlmaLinux 8 (CVE-2026-112177)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References:

Updated packages listed below:

Architecture	Package	Checksum
aarch64	libgs-9.27-20.el8_10.aarch64.rpm	43067f286449074dd920ac8443adc0392b2acb45436d3bf52ff6645b7da5ad38
aarch64	ghostscript-tools-fonts-9.27-20.el8_10.aarch64.rpm	749634e31e79962a737a1938573df09d015fe50c1511dc62afb7855f562b8f26
aarch64	ghostscript-tools-printing-9.27-20.el8_10.aarch64.rpm	784a9e7a84159d2bbfe8a95fa7c1842c1e36052e0be45d238b8c4fa78eca2a17
aarch64	ghostscript-x11-9.27-20.el8_10.aarch64.rpm	997c78f33596aef3ba4cde57926f4518d9bf54eea0a3afb7a1b1ab2710cdbd87
aarch64	ghostscript-tools-dvipdf-9.27-20.el8_10.aarch64.rpm	e2af6a63e4d2f946a3fbbd4851bdb37958e5b777d4ab70811dc9bd76426b7f2d
aarch64	libgs-devel-9.27-20.el8_10.aarch64.rpm	e772f652d80baa9c9b9c6edf47f5c4f40f11c10c2f387b469a54283af54d614d
aarch64	ghostscript-9.27-20.el8_10.aarch64.rpm	ec981ae715f8de434ee545904ea7db46c822baceac5498d9da901767656e8dcd
i686	libgs-9.27-20.el8_10.i686.rpm	1b2133f9829040f234f47e5fd2be0d6501cf618b0601922f169bb8cf7a8237f4
i686	libgs-devel-9.27-20.el8_10.i686.rpm	1f750cd4197960277a1717d81fd74d7bb38f589dc14d99cebc9f2617d60c8497
noarch	ghostscript-doc-9.27-20.el8_10.noarch.rpm	acd9918e264555285cf7aefbb47f7af6b98af8a2a9fd54d684ed2f65d3a9dffb
ppc64le	libgs-9.27-20.el8_10.ppc64le.rpm	1c996c488b4cf1d736ff6a778fdd3b6eb55f866e0493d26efd5341fc11dec5e2
ppc64le	ghostscript-tools-printing-9.27-20.el8_10.ppc64le.rpm	31907e94f732b943ab5ace85e93e023e707d3db2d579cb67b2bd6487a23afaeb
ppc64le	libgs-devel-9.27-20.el8_10.ppc64le.rpm	374b3806d69def125fec2bba34bc212e2b708c8f1cf19d7984d1bba56a603a27
ppc64le	ghostscript-9.27-20.el8_10.ppc64le.rpm	3b7ced26bcfb4b27d71e6341898646aee0cb594b9804fbf98e4f3404b9558069
ppc64le	ghostscript-tools-fonts-9.27-20.el8_10.ppc64le.rpm	5ada63f46e6ce2fe63dd7424d6584ceba735e42f0d93095fe8f2ac739902c94a
ppc64le	ghostscript-tools-dvipdf-9.27-20.el8_10.ppc64le.rpm	9b8d6166f58922330a5a33ce01fdda5b5e14c77407fbbb37e6d4a3e41d5fc7bb
ppc64le	ghostscript-x11-9.27-20.el8_10.ppc64le.rpm	b1d84e2d17fb278c7f67d80df24a5a1de3a175ed8f6a1b14f6f6861135a28627
s390x	ghostscript-tools-dvipdf-9.27-20.el8_10.s390x.rpm	0926825ac8fa42905159206380e003e42f72d274f40d89ea72f228dc5b1075d8
s390x	ghostscript-tools-fonts-9.27-20.el8_10.s390x.rpm	55cd38604e73019ec081d101cd511bb0ef1812774cc16c9d0b484728273d21e5
s390x	libgs-devel-9.27-20.el8_10.s390x.rpm	81209b80eb913c54b76418172e36772a4fc400687517112d07953832fe3aa4c4
s390x	ghostscript-9.27-20.el8_10.s390x.rpm	8d093f78603a5ec9b45581286650d717574201cd9c182a5a9350beacf448b65d
s390x	ghostscript-tools-printing-9.27-20.el8_10.s390x.rpm	8d3c93b9b27b51ed78d6bb89262c3ebc8b1ddf73a5a27d9e3d147dee33d14d02
s390x	ghostscript-x11-9.27-20.el8_10.s390x.rpm	ea9a3d5d4a5807bb91c814f5955ada04ab91ec14b00a8c3ed38efe2730419259
s390x	libgs-9.27-20.el8_10.s390x.rpm	ee720633cba74fb2c8bc64a68f966bf97c75af8ecb25ee0138541ddeab7c46ec
x86_64	libgs-devel-9.27-20.el8_10.x86_64.rpm	02e96021c068e627bc311f299e815fc1bf06d818292bf14ed4aef7a5dfeedfc9
x86_64	libgs-9.27-20.el8_10.x86_64.rpm	12c021eabff96a1f0a73b26c45efd42273887142a5ca5ff313ba19128a60769a
x86_64	ghostscript-tools-fonts-9.27-20.el8_10.x86_64.rpm	15db335aa891fa0416856a1430f6eb1f84de067e78f0e1a690f019045068fb17
x86_64	ghostscript-tools-dvipdf-9.27-20.el8_10.x86_64.rpm	1bfcdfd39bd5549c7b6393355a805ef866f15449dbd534cc50060b33d72b6249
x86_64	ghostscript-tools-printing-9.27-20.el8_10.x86_64.rpm	5059c1aaa81453592c76155f28a7272ed8e5215ef7c6aaf54e1b80343e94d5a2
x86_64	ghostscript-x11-9.27-20.el8_10.x86_64.rpm	82d0fc6bdff871030f4a39a19d8161027fb1d3ec056991ca9aa29e519346264f
x86_64	ghostscript-9.27-20.el8_10.x86_64.rpm	88778d759044ff0ba65bb942b242a1ee06cc6858b157e091701151ee0e454916

Notes:

This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.

Häufig gestellte Fragen

What is CVE-2026-112177?

It is a vulnerability in Ghostscript — the suite that renders PostScript and PDF documents — fixed in the AlmaLinux 8 update ALSA-2026:93978.

Who is affected?

Servers running Ghostscript for headless document conversion (PDF thumbnails, print pipelines, invoice processing) and any application shelling out to gs with user-supplied files.

How do I apply the fix?

Run dnf update ghostscript and restart any long-running conversion workers so they load the patched library.

Why does Ghostscript keep appearing in security feeds?

It interprets a full programming language (PostScript) from untrusted files — that design makes it a recurring source of parsing and execution flaws, which is why document pipelines must keep it current.

Referenzen

Sicherheitshinweise

System auf Schwachstellen prüfen

Wählen Sie Ihr Produkt und Betriebssystem, um die passenden Fix-Befehle zu sehen.

System prüfen

Häufig gestellte Fragen

Verwandte Warnhinweise

System auf Schwachstellen prüfen