Opened 4 months ago

Closed 4 months ago

#23324 closed enhancement (fixed)

ghostscript-10.07.1

Reported by: Bruce Dubbs Owned by: SecurityAdvisory
Priority: elevated Milestone: 13.1
Component: BOOK Version: git
Severity: medium Keywords:
Cc:

Description

New point version.

Change History (4)

comment:1 by Douglas R. Reno, 4 months ago

Priority: normal → elevated

The release notes mention a number of potential security issues fixed.

comment:2 by Joe Locash, 4 months ago

Owner: changed from blfs-book to Joe Locash
Status: new → assigned

comment:3 by Joe Locash, 4 months ago

Owner: changed from Joe Locash to SecurityAdvisory
Status: assigned → new 
Version 10.07.1 (2026-05-07)

Highlights in this release include:

The 10.07.1 release is a maintenance release:
  - This release addresses a number of potential security issues.
  - The wider adoption of "C99" and later features has reached the 
    point where we must ease our policy on this area. 
    The Ghostscript/GhostPDL codebase will remain "C89" plus widely 
    supported extensions but, as of the 10.08.0 release, our 
    included third party libraries will will be permitted to 
    use "C99" and potentially later features.
  - The 10.07.1 removes the non-standard operator ".tempfile", and 
    removes the "temp" directory from the default file permission 
    lists. By default, such access is now only available internally, 
    not from "user level" PostScript
  - Our efforts in code hygiene and maintainability continue.
  - The usual round of bug fixes, compatibility changes, and 
    incremental improvements.

See ​https://ghostscript.readthedocs.io/en/gs10.07.1/News.html for more details.

Fixed at 3bbd3ffc32. Leaving open for SA.

Last edited 4 months ago by Bruce Dubbs (previous) (diff)

comment:4 by Douglas R. Reno, 4 months ago

Resolution: → fixed
Status: new → closed

SA-13.0-100 issued

Note: See TracTickets for help on using tickets.