USN-8949-1 Names Two CVEs. The Roundup Says Three. USN-8949-1 names CVE-2026-101258 and CVE-2026-103226. LinuxSecurity's lede says three Ghostscript flaws. libgs10 is 24.04; libgs9 is 22.04. linux