ghostscript-9.27-20.el8_10

エラータID: AXSA:2026-2241:05

Release date: 
Wednesday, November 4, 2026 - 14:56
Subject: 
ghostscript-9.27-20.el8_10
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* ghostscript: Reintroduction of .charkeys -dSAFER bypass in RHEL 8 (CVE-2026-112177)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2026-112177
A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitted during the rebase from version 9.25 to 9.27, leaving privileged .forceput operations in the .charkeys procedure insufficiently protected. Processing a specially crafted PostScript file may allow an attacker to bypass -dSAFER restrictions and access files outside the permitted paths or execute commands with the permissions of the Ghostscript process.

Solution: 

Update packages.

CVEs: 
CVE-2026-112177
A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitted during the rebase from version 9.25 to 9.27, leaving privileged .forceput operations in the .charkeys procedure insufficiently protected. Processing a specially crafted PostScript file may allow an attacker to bypass -dSAFER restrictions and access files outside the permitted paths or execute commands with the permissions of the Ghostscript process.
Additional Info: 

N/A

Download: 

SRPMS
  1. ghostscript-9.27-20.el8_10.src.rpm
    MD5: 0a0a2949b7f78de249581cc6f838fefe
    SHA-256: 5497bdeb34975815dadd2bc101c2857057f9d4c4f157be15dc4b9c980a858501
    Size: 31.77 MB

Asianux Server 8 for x86_64
  1. ghostscript-9.27-20.el8_10.x86_64.rpm
    MD5: e60295549c049fc45ea5d5576fc3edb7
    SHA-256: aee1b25618af14ca7c8444ba20261edeca75cfb3e97c4f7d26edaeb1e458c140
    Size: 84.37 kB
  2. ghostscript-doc-9.27-20.el8_10.noarch.rpm
    MD5: 135dd11086d14a1125ddd42cf3343501
    SHA-256: 636b923f2695c2615e4f88bebc4e9ca8ca8abf5a6341ea04d45c39b77d905e7c
    Size: 3.60 MB
  3. ghostscript-tools-dvipdf-9.27-20.el8_10.x86_64.rpm
    MD5: 4faa8456aaf5e3264358f37fc9869bc9
    SHA-256: 45d68c8b9202c2d42c07ef605a232300a369ebdd8b8888ecd0e53a3172fca5ed
    Size: 57.86 kB
  4. ghostscript-tools-fonts-9.27-20.el8_10.x86_64.rpm
    MD5: 054ff89aaf59c9afb7219883abf78333
    SHA-256: a9acb15fc0511364c419b64061a02d481f7b65e500e885d593f2f22a6e9d1f28
    Size: 58.84 kB
  5. ghostscript-tools-printing-9.27-20.el8_10.x86_64.rpm
    MD5: 055bfa3dfc31229a58472a5e982ef52c
    SHA-256: 6be259f8e26d3179ff45e3c2a42e5f5e6afa91645b3751eb561350ce047b2e2a
    Size: 58.83 kB
  6. ghostscript-x11-9.27-20.el8_10.x86_64.rpm
    MD5: d93f8fb4a86c3921097c899afaeb3ac6
    SHA-256: 6a6b6b532c18d9c6cfc59c3253d84b1c3f04793de1c88bdc1b11f4c1c327dce6
    Size: 83.90 kB
  7. libgs-9.27-20.el8_10.i686.rpm
    MD5: 78af97782a9483d115354ce4780f1c5a
    SHA-256: 88279db6b89fd9050cab5db8214b613755f9d6e0ad797e87d60c3d5d714f2df8
    Size: 3.22 MB
  8. libgs-9.27-20.el8_10.x86_64.rpm
    MD5: 33850d8a82896be4c1f36acb11c46aa4
    SHA-256: 2c4e180c280541c2a4ee1a341197d7177cf7f6492e5d7fce61d916d8d14d421c
    Size: 3.06 MB
  9. libgs-devel-9.27-20.el8_10.i686.rpm
    MD5: a33d7c3efcbeba044ed2c78b37933803
    SHA-256: ea4706c808eeb08ae822182f90aa4bcb6b6abdd94dea6d3220c3789085511852
    Size: 64.92 kB
  10. libgs-devel-9.27-20.el8_10.x86_64.rpm
    MD5: 8f9acfa265a47747da91ab4cdaca186e
    SHA-256: 18bfd80f1d445a3e427c50d71c1ef670e1b79012d82725b1beb4e457984f87bd
    Size: 64.89 kB