Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package ghostscript for openSUSE:Factory checked in at 2025-04-02 17:08:56 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ghostscript (Old) and /work/SRC/openSUSE:Factory/.ghostscript.new.1907 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ghostscript" Wed Apr 2 17:08:56 2025 rev:71 rq:1266109 version:10.05.0 Changes: -------- --- /work/SRC/openSUSE:Factory/ghostscript/ghostscript.changes 2025-02-07 22:58:49.850409389 +0100 +++ /work/SRC/openSUSE:Factory/.ghostscript.new.1907/ghostscript.changes 2025-04-02 17:10:36.798427659 +0200 @@ -1,0 +2,31 @@ +Tue Apr 1 09:56:06 UTC 2025 - Johannes Meixner <[email protected]> + +- Version upgrade to 10.05.0 + See 'Recent Changes in Ghostscript' at Ghostscript upstream + https://ghostscript.readthedocs.io/en/gs10.05.0/News.html + * This release addresses: + + CVE-2025-27830 (bsc#1240074) + + CVE-2025-27831 (bsc#1240075) + + CVE-2025-27832 (bsc#1240077) + + CVE-2025-27833 (bsc#1240078) + + CVE-2025-27834 (bsc#1240079) + + CVE-2025-27835 (bsc#1240080) + + CVE-2025-27836 (bsc#1240081) + + CVE-2025-27837 (bsc#1240082 - affects only Windows) + * The 10.05.0 release deprecates the non-standard operator + "selectdevice", all code should now be using the standard + "setpagedevice" operator. "selectdevice" will be removed + in the 10.06.0 release. + * We now support production of PDF/X-1a and PDF/X-4a + in addition to the existing support for PDF/X-3 + * The usual round of bug fixes, compatibility changes, + and incremental improvements. +- In Ghostscript 10.05.0 the pdf2dsc utility is removed because + its PostScript program pdf2dsc.ps uses chunks of the old PDF + interpreter which is replaced with a new implementation + (in C instead of PostScript) in the 10.x series of Ghostscript + so pdf2dsc can no longer work as intended. For details see the + "Please restore PDF2DSC for preview-latex" mail thread e.g. on + https://mail.gnu.org/archive/html/auctex-devel/2025-03/threads.html + +------------------------------------------------------------------- Old: ---- ghostscript-10.04.0.tar.gz New: ---- ghostscript-10.05.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ ghostscript.spec ++++++ --- /var/tmp/diff_new_pack.GY9G9X/_old 2025-04-02 17:10:39.686548808 +0200 +++ /var/tmp/diff_new_pack.GY9G9X/_new 2025-04-02 17:10:39.710549815 +0200 @@ -1,7 +1,7 @@ # -# spec file +# spec file for package ghostscript # -# Copyright (c) 2024 SUSE LLC +# Copyright (c) 2025 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -24,21 +24,25 @@ %bcond_without apparmor %endif Name: ghostscript%{psuffix} -Version: 10.04.0 +Version: 10.05.0 Release: 0 Summary: The Ghostscript interpreter for PostScript and PDF License: AGPL-3.0-only Group: Productivity/Office/Other URL: https://www.ghostscript.com/ # Use "osc service manualrun" to fetch Source0: -Source0: https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs10040/ghostscript-%{version}.tar.gz +Source0: https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs10050/ghostscript-%{version}.tar.gz # How to manually (i.e. without "osc service") find the Source0 URL at Ghostscript upstream -# (example for the Ghostscript 10.03.1 release): +# (example for the Ghostscript 10.05.1 release): # Go to https://www.ghostscript.com -# -> "The current Ghostscript release 10.03.1 can be downloaded here" https://www.ghostscript.com/releases/index.html -# -> "Ghostscript" https://www.ghostscript.com/releases/gsdnld.html -# -> "Ghostscript 10.03.1 Source for all platforms / GNU Affero General Public License" = "Ghostscript AGPL Release" -# https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs10031/ghostscript-10.03.1.tar.gz +# -> [Download] or "Releases" https://ghostscript.com/releases/index.html +# -> "Ghostscript" https://ghostscript.com/releases/gsdnld.htm +# -> "Ghostscript 10.05.0 Source for all platforms / Ghostscript AGPL Release" +# https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs10050/ghostscript-10.05.0.tar.gz +# and "MD5 Checksums" +# https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs10050/MD5SUMS +# and on https://ghostscript.com/releases/index.html +# -> "release notes" https://ghostscript.readthedocs.io/en/gs10.05.0/News.html Source10: apparmor_ghostscript # Patch0...Patch9 is for patches from upstream: # Source10...Source99 is for sources from SUSE which are intended for upstream: @@ -61,7 +65,7 @@ BuildRequires: update-alternatives BuildRequires: zlib-devel Requires(post): update-alternatives -Requires(preun):update-alternatives +Requires(preun): update-alternatives # Provide the additional RPM Provides of the ghostscript-library package # (ghostscript_x11 is provided by the ghostscript-x11 sub-package, see below). # The "Provides: ghostscript_any" is there to support "BuildRequires: ghostscript_any" @@ -356,7 +360,6 @@ %{_bindir}/gslp %{_bindir}/gsnd %{_bindir}/lprsetup.sh -%{_bindir}/pdf2dsc %{_bindir}/pdf2ps %{_bindir}/pf2afm %{_bindir}/pfbtopfa @@ -381,7 +384,6 @@ %{_mandir}/man1/gslj.1%{?ext_man} %{_mandir}/man1/gslp.1%{?ext_man} %{_mandir}/man1/gsnd.1%{?ext_man} -%{_mandir}/man1/pdf2dsc.1%{?ext_man} %{_mandir}/man1/pdf2ps.1%{?ext_man} %{_mandir}/man1/pf2afm.1%{?ext_man} %{_mandir}/man1/pfbtopfa.1%{?ext_man} ++++++ ghostscript-10.04.0.tar.gz -> ghostscript-10.05.0.tar.gz ++++++ /work/SRC/openSUSE:Factory/ghostscript/ghostscript-10.04.0.tar.gz /work/SRC/openSUSE:Factory/.ghostscript.new.1907/ghostscript-10.05.0.tar.gz differ: char 12, line 1
