The Hacker News

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

Pillow 13.0.0 fixes EPS, JPEG, and TIFF flaws, including command execution paths involving Ghostscript and crafted image ...

Ghostscript flaw lets hackers hijack servers via PDF uploads

A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could ...
ZDNet

Ghostscript flaw could allow attackers to take remote control of systems – and there’s no fix yet

Interpreter for Adobe PostScript and PDF page description languages is used by large numbers of vendors - and in enterprises around the world. A vulnerability in Ghostscript, a widely used interpreter ...
techtarget

More Ghostscript vulnerabilities, more PostScript problems

Users of Ghostscript software are in danger, and many may be unaware of it because they do not realize that the web application service or Linux desktop app they're using calls on Ghostscript to ...

Serious vulnerability in Pillow, the standard Python image library. Risk of code execution via crafted filenames alone

IntroductionA critical vulnerability has been discovered in Pillow, the most widely used image library in Python. When ...
BleepingComputer

No Patch Available Yet for New Major Vulnerability in Ghostscript Interpreter

Tavis Ormandy, a Google Project Zero security researcher, has revealed details about a new major vulnerability discovered in Ghostscript, an interpreter for Adobe's PostScript and PDF page description ...
LWN.net

SUSE alert SUSE-SU-2024:1568-1 (ghostscript)

# Security update for ghostscript Announcement ID: SUSE-SU-2024:1568-1 Rating: moderate References: * bsc#1223852 Cross-References: * CVE-2023-52722 CVSS scores ...
LWN.net

SUSE alert openSUSE-SU-2026:12128-1 (ghostscript)

# ghostscript-10.08.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:12128-1 Rating: moderate Cross-References: * CVE-2026-101258 * CVE-2026-103226 CVSS scores ...