pkgsrc-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[pkgsrc/trunk]: pkgsrc/print/ghostscript-agpl ghostscript-agpl: updated to 9.25



details:   https://anonhg.NetBSD.org/pkgsrc/rev/91783b8faedc
branches:  trunk
changeset: 385364:91783b8faedc
user:      adam <adam%pkgsrc.org@localhost>
date:      Fri Sep 21 12:06:46 2018 +0000

description:
ghostscript-agpl: updated to 9.25

Version 9.25:

Highlights in this release include:

This release fixes problems with argument handling, some unintended results of the security fixes to the SAFER file access restrictions (specifically accessing ICC profile files), and some additional 
security issues over the recent 9.24 release.

Note: The ps2epsi utility does not, and cannot call Ghostscript with the -dSAFER command line option. It should never be called with input from untrusted sources.

Security issues have been the primary focus of this release, including solving several (well publicised) real and potential exploits.

PLEASE NOTE: We strongly urge users to upgrade to this latest release to avoid these issues.

As well as Ghostscript itself, jbig2dec has had a significant amount of work improving its robustness in the face of out specification files.

IMPORTANT: We are in the process of forking LittleCMS. LCMS2 is not thread safe, and cannot be made thread safe without breaking the ABI. Our fork will be thread safe, and include performance 
enhancements (these changes have all be been offered and rejected upstream). We will maintain compatibility between Ghostscript and LCMS2 for a time, but not in perpetuity. Our fork will be available 
as its own package separately from Ghostscript (and MuPDF).

The usual round of bug fixes, compatibility changes, and incremental improvements.

diffstat:

 print/ghostscript-agpl/Makefile.common |   4 ++--
 print/ghostscript-agpl/distinfo        |  10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diffs (29 lines):

diff -r 85369a5a8e09 -r 91783b8faedc print/ghostscript-agpl/Makefile.common
--- a/print/ghostscript-agpl/Makefile.common    Fri Sep 21 11:04:34 2018 +0000
+++ b/print/ghostscript-agpl/Makefile.common    Fri Sep 21 12:06:46 2018 +0000
@@ -1,5 +1,5 @@
-# $NetBSD: Makefile.common,v 1.14 2018/09/05 13:19:40 adam Exp $
+# $NetBSD: Makefile.common,v 1.15 2018/09/21 12:06:46 adam Exp $
 # used by print/ghostscript-agpl/Makefile
 # used by fonts/ghostscript-cidfonts-ryumin/Makefile
 
-GS_VERSION=    9.24
+GS_VERSION=    9.25
diff -r 85369a5a8e09 -r 91783b8faedc print/ghostscript-agpl/distinfo
--- a/print/ghostscript-agpl/distinfo   Fri Sep 21 11:04:34 2018 +0000
+++ b/print/ghostscript-agpl/distinfo   Fri Sep 21 12:06:46 2018 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.21 2018/09/05 13:19:40 adam Exp $
+$NetBSD: distinfo,v 1.22 2018/09/21 12:06:46 adam Exp $
 
-SHA1 (ghostscript-9.24.tar.xz) = 46a605c2576f9b11a733f6854845dcb4c24d9e10
-RMD160 (ghostscript-9.24.tar.xz) = 747080f3e33a5b35e2f5c6e25e837d94903d7e9f
-SHA512 (ghostscript-9.24.tar.xz) = dcbeeb5d3dd5ccaf949dc4be68363c50b1d35e647be4790a50b1bbf5f259f1d9181f705be27bfca708c4d270f945ff4b24e3db10b57800c1ee0ea7a40931c547
-Size (ghostscript-9.24.tar.xz) = 33015704 bytes
+SHA1 (ghostscript-9.25.tar.xz) = 9d8ddff3382113bf4a1640368350e05652c93613
+RMD160 (ghostscript-9.25.tar.xz) = f549670b7b16fbeed723afdf8f72ed39460ecbc2
+SHA512 (ghostscript-9.25.tar.xz) = 7a1c0b7546ed523f50c1452d4a1c13fcf043d6060fc9708bbc4b543f66ecb1b619b6e71998094ac702ef44a2fd159b6523271de19b1cae352981ef51fb637651
+Size (ghostscript-9.25.tar.xz) = 33027708 bytes
 SHA1 (patch-base_gserrors_h) = ce75cfb7528871842a3bd35e18a6d91c89823909
 SHA1 (patch-base_lib.mak) = 723926f167b49568376ef0c0da6aa4ec01fe1516
 SHA1 (patch-base_mkromfs.c) = 96006928e0b5381e7101027372b6e6408f1c4a0b



Home | Main Index | Thread Index | Old Index