diff --git a/ghostscript-10.03.1.tar.gz b/ghostscript-10.03.1.tar.gz
deleted file mode 100644
index 8434bf9..0000000
--- a/ghostscript-10.03.1.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:31cd01682ad23a801cc3bbc222a55f07c4ea3e068bdfb447792d54db21a2e8ad
-size 89140503
diff --git a/ghostscript-10.04.0.tar.gz b/ghostscript-10.04.0.tar.gz
new file mode 100644
index 0000000..e9354a2
--- /dev/null
+++ b/ghostscript-10.04.0.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:c764dfbb7b13fc71a7a05c634e014f9bb1fb83b899fe39efc0b6c3522a9998b1
+size 89186022
diff --git a/ghostscript.changes b/ghostscript.changes
index ec47764..4e1b9cb 100644
--- a/ghostscript.changes
+++ b/ghostscript.changes
@@ -1,3 +1,15 @@
+-------------------------------------------------------------------
+Wed Oct 23 08:54:59 UTC 2024 - Dirk Müller <dmueller@suse.com>
+
+- update to 10.04.0 (bsc#1232173):
+  * Amongst other general bugs fixes, this release addresses:
+    + CVE-2024-46951
+    + CVE-2024-46952
+    + CVE-2024-46953
+    + CVE-2024-46954
+    + CVE-2024-46955
+    + CVE-2024-46956
+
 -------------------------------------------------------------------
 Mon Jul  1 11:56:34 UTC 2024 - Johannes Meixner <jsmeix@suse.com>
 
diff --git a/ghostscript.spec b/ghostscript.spec
index dd0bc22..b6dd24b 100644
--- a/ghostscript.spec
+++ b/ghostscript.spec
@@ -1,5 +1,5 @@
 #
-# spec file
+# spec file for package ghostscript
 #
 # Copyright (c) 2024 SUSE LLC
 #
@@ -24,19 +24,14 @@
 %bcond_without  apparmor
 %endif
 Name:           ghostscript%{psuffix}
-Version:        10.03.1
+Version:        10.04.0
 Release:        0
 Summary:        The Ghostscript interpreter for PostScript and PDF
 License:        AGPL-3.0-only
 Group:          Productivity/Office/Other
 URL:            https://www.ghostscript.com/
-# How to manually get Source0:
-# Go to https://www.ghostscript.com
-# -> "The current Ghostscript release 10.03.1 can be downloaded here" https://www.ghostscript.com/releases/index.html
-# -> "Ghostscript" https://www.ghostscript.com/releases/gsdnld.html
-# -> "Ghostscript 10.03.1 Source for all platforms / GNU Affero General Public License" = "Ghostscript AGPL Release"
-# https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs10031/ghostscript-10.03.1.tar.gz
-Source0:        https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs10031/ghostscript-10.03.1.tar.gz
+# use "osc service manualrun" to fetch
+Source0:        https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs10040/ghostscript-%{version}.tar.gz
 Source10:       apparmor_ghostscript
 # Patch0...Patch9 is for patches from upstream:
 # Source10...Source99 is for sources from SUSE which are intended for upstream:
@@ -57,7 +52,7 @@ BuildRequires:  pkgconfig
 BuildRequires:  update-alternatives
 BuildRequires:  zlib-devel
 Requires(post): update-alternatives
-Requires(preun):update-alternatives
+Requires(preun): update-alternatives
 # Provide the additional RPM Provides of the ghostscript-library package
 # (ghostscript_x11 is provided by the ghostscript-x11 sub-package, see below).
 # The "Provides: ghostscript_any" is there to support "BuildRequires: ghostscript_any"