Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package ghostscript for openSUSE:Factory checked in at 2026-11-11 16:24:15 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ghostscript (Old) and /work/SRC/openSUSE:Factory/.ghostscript.new.3759290 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ghostscript" Wed Nov 11 16:24:15 2026 rev:83 rq:1396502 version:10.08.0 Changes: -------- --- /work/SRC/openSUSE:Factory/ghostscript/ghostscript.changes 2026-11-05 18:20:46.071846007 +0100 +++ /work/SRC/openSUSE:Factory/.ghostscript.new.3759290/ghostscript.changes 2026-11-11 16:24:25.704603964 +0100 @@ -1,0 +2,16 @@ +Tue Nov 10 11:51:40 UTC 2026 - Johannes Meixner <[email protected]> + +- Ghostscript version 10.08.0 also fixes the following + two security issue (cf. the below entry dated "Tue Oct 13"): +- CVE-2026-125396 + "Type 1 font-loader `.forceput` save/restore UAF yields native + read/write and controlled dispatch/RCE under `-dSAFER`" + https://bugs.ghostscript.com/show_bug.cgi?id=709684 + (bsc#1289822) +- CVE-2026-112922 + "Out-of-bounds read in ghostscript shade_next_color + via integer overflow of indexed color index in mesh shading" + https://bugs.ghostscript.com/show_bug.cgi?id=709572 + (bsc#1288956) + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------
