[CLSA-2026:1793792780] Fix CVE(s): CVE-2026-101258
Type:
security
Severity:
Important
Release date:
2026-11-04 11:46:31 UTC
Description:
* SECURITY UPDATE: -dSAFER bypass via shading function OOB write and procedural filter use-after-free - debian/patches/CVE-2026-101258.patch: validate shading sub-function outputs and detect restore in procedural data sink filters - CVE-2026-101258
CVEs fixed:
Updated packages:
  • ghostscript_9.53.3~dfsg-7+deb11u11+tuxcare.els2_amd64.deb
    sha:ee830601abae93bf171b6d6fe769de1252921680
  • ghostscript-doc_9.53.3~dfsg-7+deb11u11+tuxcare.els2_all.deb
    sha:3196ba95c3ec90599e1cdac25e1219a6dcaac79d
  • ghostscript-x_9.53.3~dfsg-7+deb11u11+tuxcare.els2_amd64.deb
    sha:0b12b9e49376e0c76fbef6ac4e3f31df21ad33dc
  • libgs-dev_9.53.3~dfsg-7+deb11u11+tuxcare.els2_amd64.deb
    sha:ff0ecdb785af36add3be99de9d68a8ed418be92d
  • libgs9_9.53.3~dfsg-7+deb11u11+tuxcare.els2_amd64.deb
    sha:86db81a22bd6bac353742e4ebf146df6b6c8537e
  • libgs9-common_9.53.3~dfsg-7+deb11u11+tuxcare.els2_all.deb
    sha:f1df9a071d92f75071b44479ca4e1f018d339c8e
  • ghostscript_9.53.3~dfsg-7+deb11u11+tuxcare.els2_arm64.deb
    sha:cad9fb600a75f4e86be485691ac9ac12aee07db0
  • ghostscript-x_9.53.3~dfsg-7+deb11u11+tuxcare.els2_arm64.deb
    sha:296b06c6228c5ff2a884f6c758a24885c1b2926b
  • libgs-dev_9.53.3~dfsg-7+deb11u11+tuxcare.els2_arm64.deb
    sha:14322941ee32a45ab25bb62ae143f2206114abd8
  • libgs9_9.53.3~dfsg-7+deb11u11+tuxcare.els2_arm64.deb
    sha:4769ee0b0336d395d21896fd8f6ad478d38dea69
  • ghostscript_9.53.3~dfsg-7+deb11u11+tuxcare.els2_armel.deb
    sha:2257136e7a78c958626f1f1fe747b8811aad3817
  • ghostscript-x_9.53.3~dfsg-7+deb11u11+tuxcare.els2_armel.deb
    sha:c992cb4423b38b51ae5fe5d740a606d76b668029
  • libgs-dev_9.53.3~dfsg-7+deb11u11+tuxcare.els2_armel.deb
    sha:138c53a30f501a4f813cc5e11cce759a5b9e42c8
  • libgs9_9.53.3~dfsg-7+deb11u11+tuxcare.els2_armel.deb
    sha:866e702b2dde066048f6a3e159a484e4fa301982
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.