USN-8949-1: Ghostscript vulnerabilities

Rick de Jager discovered that Ghostscript incorrectly handled memory under certain circumstances when processing PostScript documents. If a user or automated system were tricked into processing a specially crafted document, an attacker could possibly use this issue to bypass the sandbox and execute arbitrary code. (CVE-2026-101258) It was discovered that Ghostscript incorrectly handled memory when converting certain fonts. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to cause Ghostscript to crash, or possibly ex…

Ubuntu Security Noticesで読む

2026/10/22 00:39、Ubuntu Security Noticesが「USN-8949-1: Ghostscript vulnerabilities」を公開しました (種別: 脆弱性アドバイザリ)。関連する技術: Ubuntu、Linux。CVE: CVE-2026-101258。