QSN-8791-1: Ghostscript vulnerability
2026-09-21

Summary:
Ghostscript could be made to crash or run programs as your login if it
opened a specially crafted file.

Details:
It was discovered that Ghostscript incorrectly handled JPEG 2000 image
components with mismatched subsampling factors. An attacker could
possibly use this issue to cause Ghostscript to crash or execute
arbitrary code if it opened a specially crafted file.

Affected QuantaStor releases:
  6.9.1.001 jammy: ghostscript 9.55.0~dfsg1-0ubuntu5.15 (fixed in 9.55.0~dfsg1-0ubuntu5.14)
  6.9.1.001 jammy: libgs9 9.55.0~dfsg1-0ubuntu5.15 (fixed in 9.55.0~dfsg1-0ubuntu5.14)
  6.9.1.001 jammy: libgs9-common 9.55.0~dfsg1-0ubuntu5.15 (fixed in 9.55.0~dfsg1-0ubuntu5.14)
  6.9.0.464 jammy: ghostscript 9.55.0~dfsg1-0ubuntu5.14 (fixed in 9.55.0~dfsg1-0ubuntu5.14)
  6.9.0.464 jammy: libgs9 9.55.0~dfsg1-0ubuntu5.14 (fixed in 9.55.0~dfsg1-0ubuntu5.14)
  6.9.0.464 jammy: libgs9-common 9.55.0~dfsg1-0ubuntu5.14 (fixed in 9.55.0~dfsg1-0ubuntu5.14)
  6.8.6.015 jammy: ghostscript 9.55.0~dfsg1-0ubuntu5.13 (fixed in 9.55.0~dfsg1-0ubuntu5.14)
  6.8.6.015 jammy: libgs9 9.55.0~dfsg1-0ubuntu5.13 (fixed in 9.55.0~dfsg1-0ubuntu5.14)
  6.8.6.015 jammy: libgs9-common 9.55.0~dfsg1-0ubuntu5.13 (fixed in 9.55.0~dfsg1-0ubuntu5.14)
  6.8.5.018 jammy: ghostscript 9.55.0~dfsg1-0ubuntu5.13 (fixed in 9.55.0~dfsg1-0ubuntu5.14)
  6.8.5.018 jammy: libgs9 9.55.0~dfsg1-0ubuntu5.13 (fixed in 9.55.0~dfsg1-0ubuntu5.14)
  6.8.5.018 jammy: libgs9-common 9.55.0~dfsg1-0ubuntu5.13 (fixed in 9.55.0~dfsg1-0ubuntu5.14)
  6.8.4.038 jammy: ghostscript 9.55.0~dfsg1-0ubuntu5.13 (fixed in 9.55.0~dfsg1-0ubuntu5.14)
  6.8.4.038 jammy: libgs9 9.55.0~dfsg1-0ubuntu5.13 (fixed in 9.55.0~dfsg1-0ubuntu5.14)
  6.8.4.038 jammy: libgs9-common 9.55.0~dfsg1-0ubuntu5.13 (fixed in 9.55.0~dfsg1-0ubuntu5.14)
  6.8.3.018 jammy: ghostscript 9.55.0~dfsg1-0ubuntu5.13 (fixed in 9.55.0~dfsg1-0ubuntu5.14)
  6.8.3.018 jammy: libgs9 9.55.0~dfsg1-0ubuntu5.13 (fixed in 9.55.0~dfsg1-0ubuntu5.14)
  6.8.3.018 jammy: libgs9-common 9.55.0~dfsg1-0ubuntu5.13 (fixed in 9.55.0~dfsg1-0ubuntu5.14)
  6.8.2.002 jammy: ghostscript 9.55.0~dfsg1-0ubuntu5.13 (fixed in 9.55.0~dfsg1-0ubuntu5.14)
  6.8.2.002 jammy: libgs9 9.55.0~dfsg1-0ubuntu5.13 (fixed in 9.55.0~dfsg1-0ubuntu5.14)
  6.8.2.002 jammy: libgs9-common 9.55.0~dfsg1-0ubuntu5.13 (fixed in 9.55.0~dfsg1-0ubuntu5.14)
  6.8.1.007 jammy: ghostscript 9.55.0~dfsg1-0ubuntu5.13 (fixed in 9.55.0~dfsg1-0ubuntu5.14)
  6.8.1.007 jammy: libgs9 9.55.0~dfsg1-0ubuntu5.13 (fixed in 9.55.0~dfsg1-0ubuntu5.14)
  6.8.1.007 jammy: libgs9-common 9.55.0~dfsg1-0ubuntu5.13 (fixed in 9.55.0~dfsg1-0ubuntu5.14)
  6.8.0.205 jammy: ghostscript 9.55.0~dfsg1-0ubuntu5.13 (fixed in 9.55.0~dfsg1-0ubuntu5.14)
  6.8.0.205 jammy: libgs9 9.55.0~dfsg1-0ubuntu5.13 (fixed in 9.55.0~dfsg1-0ubuntu5.14)
  6.8.0.205 jammy: libgs9-common 9.55.0~dfsg1-0ubuntu5.13 (fixed in 9.55.0~dfsg1-0ubuntu5.14)

CVEs: CVE-2026-39919

References:
  https://ubuntu.com/security/notices/USN-8791-1