Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package ghostscript for openSUSE:Factory checked in at 2026-10-02 23:02:09 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ghostscript (Old) and /work/SRC/openSUSE:Factory/.ghostscript.new.1631729 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ghostscript" Fri Oct 2 23:02:09 2026 rev:79 rq:1381912 version:10.08.0 Changes: -------- --- /work/SRC/openSUSE:Factory/ghostscript/ghostscript.changes 2026-05-23 23:22:16.500214490 +0200 +++ /work/SRC/openSUSE:Factory/.ghostscript.new.1631729/ghostscript.changes 2026-10-02 23:02:44.675788140 +0200 @@ -1,0 +2,27 @@ +Thu Oct 1 11:22:41 UTC 2026 - Johannes Meixner <[email protected]> + +- Version upgrade to 10.08.0 + See 'Recent Changes in Ghostscript' at Ghostscript upstream + https://ghostscript.readthedocs.io/en/gs10.08.0/News.html + * This release addresses a number of potential security issues. + * The 10.08.0 release removes a number of old, unmaintained + and (at the time of this release) untestable and thus + unmaintainable devices from the default builds, + as a precursor to removal of the device sources + in the next release. + This process will continue as development time allows. + If you rely on any of the removed devices and are willing + to help testing them, please get in touch at: + bugs.ghostscript.com + * The usual round of bug fixes, compatibility changes, + and incremental improvements. +- In particular it fixes CVE-2026-39919 + "Heap buffer overflow in the JPEG 2000 (JPXDecode) output adapter + via component subsampling mismatch (base/sjpx_openjpeg.c)" + https://bugs.ghostscript.com/show_bug.cgi?id=709666 + "heap-based buffer overflow in the JPEG 2000 output adapter + allows attackers to cause memory corruption + by supplying crafted PDFs" + (bsc#1280620) + +------------------------------------------------------------------- Old: ---- ghostscript-10.07.1.tar.gz New: ---- ghostscript-10.08.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ ghostscript.spec ++++++ --- /var/tmp/diff_new_pack.3v2SmB/_old 2026-10-02 23:02:47.246895753 +0200 +++ /var/tmp/diff_new_pack.3v2SmB/_new 2026-10-02 23:02:47.249895878 +0200 @@ -29,26 +29,26 @@ %bcond_with libalternatives %endif Name: ghostscript%{psuffix} -Version: 10.07.1 +Version: 10.08.0 Release: 0 Summary: The Ghostscript interpreter for PostScript and PDF License: AGPL-3.0-only Group: Productivity/Office/Other URL: https://www.ghostscript.com/ # Use "osc service manualrun" to fetch Source0: -Source0: https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs10070/ghostscript-%{version}.tar.gz +Source0: https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs10080/ghostscript-%{version}.tar.gz # How to manually (i.e. without "osc service") find the Source0 URL at Ghostscript upstream -# (example for the Ghostscript 10.07.1 release): +# (example for the Ghostscript 10.08.0 release): # Go to https://www.ghostscript.com # -> [Download] or "Releases" https://ghostscript.com/releases/index.html # -> "Ghostscript" https://ghostscript.com/releases/gsdnld.htm -# -> "Ghostscript 10.07.1 Source for all platforms / Ghostscript AGPL Release" -# https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs10071/ghostscript-10.07.1.tar.gz +# -> "Ghostscript 10.08.0 Source for all platforms / Ghostscript AGPL Release" +# https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs10080/ghostscript-10.08.0.tar.gz # and "MD5 Checksums" -# https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs10071/MD5SUMS +# https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs10080/MD5SUMS # and on https://ghostscript.com/releases/index.html # -> "release notes" -# https://ghostscript.readthedocs.io/en/gs10.07.1/News.html +# https://ghostscript.readthedocs.io/en/gs10.08.0/News.html Source10: apparmor_ghostscript # Patch0...Patch9 is for patches from upstream: # Source10...Source99 is for sources from SUSE which are intended for upstream: ++++++ ghostscript-10.07.1.tar.gz -> ghostscript-10.08.0.tar.gz ++++++ /work/SRC/openSUSE:Factory/ghostscript/ghostscript-10.07.1.tar.gz /work/SRC/openSUSE:Factory/.ghostscript.new.1631729/ghostscript-10.08.0.tar.gz differ: char 29, line 1
