CVS commit: pkgsrc/print/ghostscript-agpl

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sun May 19 11:55:37 UTC 2024

Modified Files:
        pkgsrc/print/ghostscript-agpl: Makefile Makefile.common distinfo

Log Message:
ghostscript-agpl: update to 10.03.1.

Version 10.03.1 (2024-05-02)

Highlights in this release include:

  • Fixes for CVE-2024-33869, CVE-2023-52722, CVE-2024-33870, CVE-2024-33871
    and CVE-2024-29510
  • IMPORTANT: For the 10.04.0 release (fall/autumn 2024) we will be adding
    protection for device selection from PostScript input. This will mean that,
    by default, only the device specified on the command line will be
    permitted. Similar to the file permissions, there will be a
    "--permit-devices=" allowing a comma separation list of allowed devices.
    This will also take a single wildcard "*" allowing any device.

    Any application which relies on allowing PostScript to change devices
    during a job will have to be aware, and take action to deal with this
    change.

    The exception is "nulldevice", switching to that requires no special
    action.
  • A vulnerability was identified in the way Ghostscript/GhostPDL called
    tesseract for the OCR devices, which could allow arbitrary code execution.
    As as result, we strongly urge anyone including the OCR devices in their
    build to update as soon as possible.
  • As of this release (10.03.1) pdfwrite creates PDF files with XRef streams
    and ObjStm streams. This can result in considerably smaller PDF output
    files. See Vector Devices for more details.
  • Ghostscript/pdfwrite now supports passing through PDF "Optional Content".
  • Our efforts in code hygiene and maintainability continue.
  • The usual round of bug fixes, compatibility changes, and incremental
    improvements.
  • (9.53.0) We have added the capability to build with the Tesseract OCR
    engine. In such a build, new devices are available (pdfocr8/pdfocr24/
    pdfocr32) which render the output file to an image, OCR that image, and
    output the image "wrapped" up as a PDF file, with the OCR generated text
    information included as "invisible" text (in PDF terms, text rendering mode
    3).

    Mainly due to time constraints, we only support including Tesseract from
    source included in our release packages, and not linking to Tesseract/
    Leptonica shared libraries. Whether we add this capability will be largely
    dependent on community demand for the feature.

    See Enabling OCR for more details.


To generate a diff of this commit:
cvs rdiff -u -r1.85 -r1.86 pkgsrc/print/ghostscript-agpl/Makefile
cvs rdiff -u -r1.33 -r1.34 pkgsrc/print/ghostscript-agpl/Makefile.common
cvs rdiff -u -r1.49 -r1.50 pkgsrc/print/ghostscript-agpl/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/print/ghostscript-agpl/Makefile
diff -u pkgsrc/print/ghostscript-agpl/Makefile:1.85 pkgsrc/print/ghostscript-agpl/Makefile:1.86
--- pkgsrc/print/ghostscript-agpl/Makefile:1.85 Thu May 16 06:15:27 2024
+++ pkgsrc/print/ghostscript-agpl/Makefile      Sun May 19 11:55:37 2024
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.85 2024/05/16 06:15:27 wiz Exp $
+# $NetBSD: Makefile,v 1.86 2024/05/19 11:55:37 wiz Exp $
 
 DISTNAME=      ghostscript-${GS_VERSION}
 PKGNAME=       ${DISTNAME:S/ghostscript/ghostscript-agpl/}
-PKGREVISION=   1
 CATEGORIES=    print
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=ArtifexSoftware/}
 GITHUB_PROJECT=        ghostpdl-downloads

Index: pkgsrc/print/ghostscript-agpl/Makefile.common
diff -u pkgsrc/print/ghostscript-agpl/Makefile.common:1.33 pkgsrc/print/ghostscript-agpl/Makefile.common:1.34
--- pkgsrc/print/ghostscript-agpl/Makefile.common:1.33  Mon Mar 11 12:45:37 2024
+++ pkgsrc/print/ghostscript-agpl/Makefile.common       Sun May 19 11:55:37 2024
@@ -1,5 +1,5 @@
-# $NetBSD: Makefile.common,v 1.33 2024/03/11 12:45:37 wiz Exp $
+# $NetBSD: Makefile.common,v 1.34 2024/05/19 11:55:37 wiz Exp $
 # used by print/ghostscript-agpl/Makefile
 # used by fonts/ghostscript-cidfonts-ryumin/Makefile
 
-GS_VERSION=    10.03.0
+GS_VERSION=    10.03.1

Index: pkgsrc/print/ghostscript-agpl/distinfo
diff -u pkgsrc/print/ghostscript-agpl/distinfo:1.49 pkgsrc/print/ghostscript-agpl/distinfo:1.50
--- pkgsrc/print/ghostscript-agpl/distinfo:1.49 Mon Mar 11 21:29:17 2024
+++ pkgsrc/print/ghostscript-agpl/distinfo      Sun May 19 11:55:37 2024
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.49 2024/03/11 21:29:17 schmonz Exp $
+$NetBSD: distinfo,v 1.50 2024/05/19 11:55:37 wiz Exp $
 
-BLAKE2s (ghostscript-10.03.0.tar.xz) = ba41f0419063e1dec395939e82f57870639c4f8548c63094974c838345ecb241
-SHA512 (ghostscript-10.03.0.tar.xz) = 74d7da586eefbf3fb3c085bb4d2b73ee667fd0ae9cff73ece613c77c443148b847086f91802124baf91ac35cdc83be07199799378def92c8fbd96ced7d0ee9a8
-Size (ghostscript-10.03.0.tar.xz) = 68041176 bytes
+BLAKE2s (ghostscript-10.03.1.tar.xz) = f5edbba3d8c82612959270320f844caeb2ba6108f071cf736eabecb46cd9861b
+SHA512 (ghostscript-10.03.1.tar.xz) = 59e071cd23aed246b51317d3cccd9ccf8e1e84c4ecf9b22fb938e561eff42cec61915b0bdd96a313a3ea27750579c54ca0d0862b65edd306a621731c0063ffd3
+Size (ghostscript-10.03.1.tar.xz) = 68048612 bytes
 SHA1 (patch-base_gserrors_h) = 36c8fcf27fcb0bfdcc075ad96efe3e44fb727d9a
 SHA1 (patch-base_lib.mak) = 723926f167b49568376ef0c0da6aa4ec01fe1516
 SHA1 (patch-base_mkromfs.c) = 9d9afbd0fbb8c70c8f4f7de3cadc5b54541f0db0