CVS commit: pkgsrc/print/ghostscript-agpl

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Mon Mar 11 12:45:37 UTC 2024

Modified Files:
        pkgsrc/print/ghostscript-agpl: Makefile Makefile.common PLIST distinfo

Log Message:
ghostscript-agpl: update to 10.03.0.

Version 10.03.0 (2024-03-06)

Highlights in this release include:

  • A vulnerability was identified in the way Ghostscript/GhostPDL called
    tesseract for the OCR devices, which could allow arbitrary code execution.
    As as result, we strongly urge anyone including the OCR devices in their
    build to update as soon as possible.
  • As of this release (10.03.0) pdfwrite creates PDF files with XRef streams
    and ObjStm streams. This can result in considerably smaller PDF output
    files. See Vector Devices for more details.
  • Ghostscript/pdfwrite now supports passing through PDF "Optional Content".
  • Our efforts in code hygiene and maintainability continue.
  • The usual round of bug fixes, compatibility changes, and incremental
    improvements.

Incompatible changes

  • (10.03.0) Almost all the "internal" PostScript procedures defined during
    the interpreter startup are now "executeonly", further reducing the attack
    surface of the interpreter.

    The nature of these procedures means there should be no impact for
    legitimate usage, but it is possible it will impact uses which abuse the
    previous accessibility (even for legitimate reasons). Such cases may now
    require "DELAYBIND", See DELAYBIND
  • (10.03.0) The "makeimagedevice" non-standard operator has been removed. It
    allowed low level access to the graphics library in a way that was,
    essentially impossible to secure.
  • (10.03.0) The "putdeviceprops", "getdeviceprops", "finddevice",
    "copydevice", "findprotodevice" non-standard operators have all been
    removed. They provided functionality that is either accessible through
    standard operators, or should not be used by user PostScript.
  • (10.03.0) The process of "tidying" the PostScript namespace should have
    removed only non-standard and undocumented operators. Nevertheless, it is
    possible that any integrations or utilities that rely on those non-standard
    and undocumented operators may stop working or may change behaviour.

    If you encounter such a case, please contact us (Discord, #ghostscript IRC
    channel, or the gs-devel mailing list would be best), and we'll work with
    you to either find an alternative solution or return the previous
    functionality, if there is genuinely no other option.


To generate a diff of this commit:
cvs rdiff -u -r1.83 -r1.84 pkgsrc/print/ghostscript-agpl/Makefile
cvs rdiff -u -r1.32 -r1.33 pkgsrc/print/ghostscript-agpl/Makefile.common
cvs rdiff -u -r1.25 -r1.26 pkgsrc/print/ghostscript-agpl/PLIST
cvs rdiff -u -r1.47 -r1.48 pkgsrc/print/ghostscript-agpl/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/print/ghostscript-agpl/Makefile
diff -u pkgsrc/print/ghostscript-agpl/Makefile:1.83 pkgsrc/print/ghostscript-agpl/Makefile:1.84
--- pkgsrc/print/ghostscript-agpl/Makefile:1.83 Mon Nov 13 18:26:25 2023
+++ pkgsrc/print/ghostscript-agpl/Makefile      Mon Mar 11 12:45:37 2024
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.83 2023/11/13 18:26:25 wiz Exp $
+# $NetBSD: Makefile,v 1.84 2024/03/11 12:45:37 wiz Exp $
 
 DISTNAME=      ghostscript-${GS_VERSION}
 PKGNAME=       ${DISTNAME:S/ghostscript/ghostscript-agpl/}
-PKGREVISION=   2
 CATEGORIES=    print
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=ArtifexSoftware/}
 GITHUB_PROJECT=        ghostpdl-downloads

Index: pkgsrc/print/ghostscript-agpl/Makefile.common
diff -u pkgsrc/print/ghostscript-agpl/Makefile.common:1.32 pkgsrc/print/ghostscript-agpl/Makefile.common:1.33
--- pkgsrc/print/ghostscript-agpl/Makefile.common:1.32  Fri Nov  3 09:14:16 2023
+++ pkgsrc/print/ghostscript-agpl/Makefile.common       Mon Mar 11 12:45:37 2024
@@ -1,5 +1,5 @@
-# $NetBSD: Makefile.common,v 1.32 2023/11/03 09:14:16 adam Exp $
+# $NetBSD: Makefile.common,v 1.33 2024/03/11 12:45:37 wiz Exp $
 # used by print/ghostscript-agpl/Makefile
 # used by fonts/ghostscript-cidfonts-ryumin/Makefile
 
-GS_VERSION=    10.02.1
+GS_VERSION=    10.03.0

Index: pkgsrc/print/ghostscript-agpl/PLIST
diff -u pkgsrc/print/ghostscript-agpl/PLIST:1.25 pkgsrc/print/ghostscript-agpl/PLIST:1.26
--- pkgsrc/print/ghostscript-agpl/PLIST:1.25    Mon Oct 23 10:59:33 2023
+++ pkgsrc/print/ghostscript-agpl/PLIST Mon Mar 11 12:45:37 2024
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.25 2023/10/23 10:59:33 adam Exp $
+@comment $NetBSD: PLIST,v 1.26 2024/03/11 12:45:37 wiz Exp $
 bin/dvipdf
 bin/eps2eps
 bin/gs
@@ -33,7 +33,7 @@ include/ghostscript/iapi.h
 include/ghostscript/ierrors.h
 lib/libgs.so
 lib/libgs.so.10
-lib/libgs.so.10.02
+lib/libgs.so.10.03
 man/man1/dvipdf.1
 man/man1/eps2eps.1
 man/man1/gs.1

Index: pkgsrc/print/ghostscript-agpl/distinfo
diff -u pkgsrc/print/ghostscript-agpl/distinfo:1.47 pkgsrc/print/ghostscript-agpl/distinfo:1.48
--- pkgsrc/print/ghostscript-agpl/distinfo:1.47 Fri Nov  3 09:14:16 2023
+++ pkgsrc/print/ghostscript-agpl/distinfo      Mon Mar 11 12:45:37 2024
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.47 2023/11/03 09:14:16 adam Exp $
+$NetBSD: distinfo,v 1.48 2024/03/11 12:45:37 wiz Exp $
 
-BLAKE2s (ghostscript-10.02.1.tar.xz) = 0af0a3eea666d184acb4f825fa7a1ae0a63a5e134d72afe561a2cc58fd87e696
-SHA512 (ghostscript-10.02.1.tar.xz) = ee0f754c1bd8a18428ad14eaa3ead80ff8b96275af5012e7a8384f1f10490da056eec9ae3cc791a7a13a24e16e54df5bccdd109c7d53a14534bbd7360a300b11
-Size (ghostscript-10.02.1.tar.xz) = 68017088 bytes
+BLAKE2s (ghostscript-10.03.0.tar.xz) = ba41f0419063e1dec395939e82f57870639c4f8548c63094974c838345ecb241
+SHA512 (ghostscript-10.03.0.tar.xz) = 74d7da586eefbf3fb3c085bb4d2b73ee667fd0ae9cff73ece613c77c443148b847086f91802124baf91ac35cdc83be07199799378def92c8fbd96ced7d0ee9a8
+Size (ghostscript-10.03.0.tar.xz) = 68041176 bytes
 SHA1 (patch-base_gserrors_h) = 36c8fcf27fcb0bfdcc075ad96efe3e44fb727d9a
 SHA1 (patch-base_lib.mak) = 723926f167b49568376ef0c0da6aa4ec01fe1516
 SHA1 (patch-base_mkromfs.c) = 9d9afbd0fbb8c70c8f4f7de3cadc5b54541f0db0