Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package ghostscript for openSUSE:Factory checked in at 2026-10-28 17:45:05 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ghostscript (Old) and /work/SRC/openSUSE:Factory/.ghostscript.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ghostscript" Wed Oct 28 17:45:05 2026 rev:81 rq:1393081 version:10.08.0 Changes: -------- --- /work/SRC/openSUSE:Factory/ghostscript/ghostscript.changes 2026-10-14 18:34:39.380695335 +0200 +++ /work/SRC/openSUSE:Factory/.ghostscript.new.2252680/ghostscript.changes 2026-10-28 17:45:16.940887674 +0100 @@ -1,0 +2,9 @@ +Tue Oct 27 12:19:35 UTC 2026 - Johannes Meixner <[email protected]> + +- Build --without-local-brotli to not use the brotli sources + in Ghostscript but the system brotli library to avoid + CVE-2026-111497: ghostscript: brotli: "Brotli decoder + out-of-bounds write permits remote code execution" + (bsc#1287815) + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ ghostscript.spec ++++++ --- /var/tmp/diff_new_pack.pH2yJX/_old 2026-10-28 17:45:18.989972769 +0100 +++ /var/tmp/diff_new_pack.pH2yJX/_new 2026-10-28 17:45:18.991972852 +0100 @@ -76,6 +76,7 @@ Requires(post): update-alternatives Requires(preun): update-alternatives %endif +BuildRequires: libbrotli-devel BuildRequires: zlib-devel # Provide the additional RPM Provides of the ghostscript-library package # (ghostscript_x11 is provided by the ghostscript-x11 sub-package, see below). @@ -220,6 +221,8 @@ # unbundling the 35 Postscript Standard fonts, provided by the URW font package # --without-libpaper disables libpaper support because SUSE does not have libpaper. # --without-tesseract because this requires C++ (it might be added if Tesseract support in Ghostscript is needed). +# --without-local-zlib do not use the zlib sources in Ghostscript but the system zlib library +# --without-local-brotli do not use the brotli sources in Ghostscript but the system brotli library %define gs_font_path %{_datadir}/fonts/truetype:%{_datadir}/fonts/Type1:%{_datadir}/fonts/CID:%{_datadir}/fonts/URW # See http://bugs.ghostscript.com/show_bug.cgi?id=693100 export SUSE_ASNEEDED=0 @@ -248,6 +251,7 @@ --with-x \ %endif --without-local-zlib \ + --without-local-brotli \ --with-system-libtiff \ --disable-gtk \ --without-ufst \
