Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
home:Alexander_Naumov:SLE-12:Update
ghostscript-mini.7320
ghostscript.changes
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File ghostscript.changes of Package ghostscript-mini.7320
------------------------------------------------------------------- Wed May 2 14:21:58 CEST 2018 - jsmeix@suse.de - CVE-2018-10194.patch fixes stack-based buffer overflow in gdevpdts.c (bsc#1090099), see https://bugs.ghostscript.com/show_bug.cgi?id=699255 and http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879 ------------------------------------------------------------------- Mon Jan 22 14:59:27 UTC 2018 - daniel.molkentin@suse.com - Update CVE-2016-10317.patch to final upstream patch, required another commit which has been sqashed in - CVE-2017-9835.patch fixes heap-based buffer overflow in gs_alloc_ref_array see https://bugs.ghostscript.com/show_bug.cgi?id=697985 (bsc#1050879) ------------------------------------------------------------------- Fri Jan 19 09:49:53 UTC 2018 - daniel.molkentin@suse.com - CVE-2016-10317.patch fixes DoS in fill_threshhold_buffer see https://bugs.ghostscript.com/show_bug.cgi?id=697459 (bsc#1032230) - CVE-2017-9612.patch fixes DoS in Ins_IP function see https://bugs.ghostscript.com/show_bug.cgi?id=698026 (bsc#1050891) - CVE-2017-9726.patch fixes heap-based buffer over-read in Ins_MDRP see http://bugs.ghostscript.com/show_bug.cgi?id=698055 (bsc#1050889) - CVE-2017-9727.patch fixes DoS in gx_ttfReader__Read function see http://bugs.ghostscript.com/show_bug.cgi?id=698056 (bsc#1050888) - CVE-2017-9739.patch fixes DoS in Ins_JMPR function see https://bugs.ghostscript.com/show_bug.cgi?id=698063 (bsc#1050887) - CVE-2017-11714.patch fixes out of bounds read in igc_reloc_struct_ptr() (bsc#1051184) - CVE-2016-10219.patch fixes DoS in intersect() function see https://bugs.ghostscript.com/show_bug.cgi?id=697453 (bsc#1032138) ------------------------------------------------------------------- Fri Jun 2 09:12:45 UTC 2017 - daniel.molkentin@suse.com - CVE-2017-9216.patch fixes a NULL pointer dereference in jbig2_huffman_get see https://bugs.ghostscript.com/show_bug.cgi?id=697934 (bsc#1040643) ------------------------------------------------------------------- Fri Apr 28 09:56:10 UTC 2017 - vcizek@suse.com - CVE-2016-9601.patch fixes an integer overflow in jbig2_image_new see https://bugs.ghostscript.com/show_bug.cgi?id=697457 (bsc#1018128) - CVE-2016-10220.patch fixes a NULL pointer dereference in gx_device_finalize see https://bugs.ghostscript.com/show_bug.cgi?id=697450 (bsc#1032120) - CVE-2017-5951.patch fixes a NULL pointer dereference in ref_stack_index see https://bugs.ghostscript.com/show_bug.cgi?id=697548 (bsc#1032114) - CVE-2017-7207.patch fixes a NULL pointer dereference in mem_get_bits_rectangle see https://bugs.ghostscript.com/show_bug.cgi?id=697676 (bsc#1030263) ------------------------------------------------------------------- Fri Apr 28 08:23:03 UTC 2017 - vcizek@suse.com - CVE-2017-8291.patch fixes a type confusion in .rsdparams and .eqproc see https://bugs.ghostscript.com/show_bug.cgi?id=697808 (bsc#1036453) ------------------------------------------------------------------- Mon Oct 31 22:29:48 UTC 2016 - alarrosa@suse.com - Add 0001-Fix-locksafe.patch to fix a regression introduced in CVE-2013-5653.patch by which ps files couldn't be opened in okular/evince (boo#1006592, kde#371887). ------------------------------------------------------------------- Thu Oct 20 13:27:39 CEST 2016 - jsmeix@suse.de - CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5 see http://bugs.ghostscript.com/show_bug.cgi?id=697203 (bsc#1004237). ------------------------------------------------------------------- Mon Oct 10 00:24:11 UTC 2016 - sflees@suse.de - Fix multiple -dsafer realated CVE's (bsc#1001951) * CVE-2013-5653.patch * CVE-2016-7978.patch * CVE-2016-7979.patch ------------------------------------------------------------------- Fri Jan 29 06:00:51 UTC 2016 - fcrozat@suse.com - Add fix-mutex-crash.patch: fix crash in mutex (bsc#963017) (ghostscript bug #695862) ------------------------------------------------------------------- Mon Jul 27 11:17:14 CEST 2015 - jsmeix@suse.de - CVE-2015-3228.patch fixes out of bound read/write cause by integer overflow in gsmalloc.c (boo#939342). ------------------------------------------------------------------- Sun Sep 28 18:00:37 CEST 2014 - ro@suse.de - readd ppc64le patch ppc64le-support.patch lcms has not been fixed upstream and lcms2 has been fixed in a broken way ------------------------------------------------------------------- Tue Sep 23 10:14:28 CEST 2014 - jsmeix@suse.de - Version upgrade to 9.15. Primarily a maintenance release. There are no recorded incompatible changes (as of this writing). Highlights in this release include: * Ghostscript now supports the PDF security handler revision 6. * The pdfwrite and ps2write (and related) devices can now be forced to "flatten" glyphs into "basic" marking operations (rather than writing fonts to the output), by giving the -dNoOutputFonts command line option (defaults to "false"). * PostScript programs can now use get_params or get_param to determine if a page contains color markings by reading the pageneutralcolor state from the device (so whether the page is "color" or "mono"). Note that this is only accurate when in clist mode, so -dMaxBitmap=0 and -dGrayDetection=true should both be used. * The pdfwrite device now supports Link annotations with GoTo and GoToR actions. * The pdfwrite device now supports BMC/BDC/EMC pdfmarks * Regarding the new color management for the pdfwrite device introduced in the previous release, the proscription on using the new color management when producing PDF/A-1 compliant files is now lifted. To reiterate, also, with the new color management implementation, using the UseCIEColor option is strongly discouraged. For further information on the new pdfwrite color management, see in Ps2pdf.htm the "Color Conversion and Management" section. * Plus the usual round of bug fixes, compatibility changes, and incremental improvements. For details see the News.htm and History9.htm files. ------------------------------------------------------------------- Wed Sep 17 12:17:47 CEST 2014 - jsmeix@suse.de - Version upgrade to 9.15rc2 (second release candidate for 9.15). Ghostscript upstream QA highlighted a couple of issues that they felt warranted a fresh release candidate. For details see the History9.htm file. ------------------------------------------------------------------- Tue Sep 9 16:06:31 CEST 2014 - jsmeix@suse.de - Version upgrade to 9.15rc1 (first release candidate for 9.15). For details see the News.htm and History9.htm files. - ppc64le-support.patch is no longer needed because it is fixed in the upstream sources. - Removed trailing whitespaces in spec file and changes file. ------------------------------------------------------------------- Mon Aug 18 15:12:28 UTC 2014 - meissner@suse.com - gs does not seem to require libopenssl-devel for building. ------------------------------------------------------------------- Thu Mar 27 12:21:55 CET 2014 - jsmeix@suse.de - Version upgrade to 9.14. Primarily a maintenance release. Highlights in this release include (excerpt): * pdfwrite now uses the same color management engine as Ghostscript rendering devices (by default LCMS2). For the duration of this release a new switch -dPDFUseOldCMS is available which will restore the old color management. See: "Color Conversion and Management" in Ps2pdf.htm Due to constraints of the PDF/A-1 specification, the new color management does not yet apply when producing PDF/A files. * A new device 'eps2write' has been added which allows for the creation of EPS files using the ps2write device instead of the deprecated and removed pswrite device. The epswrite device is now also deprecated and will be removed in a future release. * Ghostscript has a new "pwgraster" output device for PWG Raster output. * The CUPS device now has improved support for PPD-less printing. For details see the News.htm and History9.htm files. ------------------------------------------------------------------- Fri Dec 13 19:09:12 UTC 2013 - uweigand@de.ibm.com - ppc64le-support.patch from IBM fixes endianness in lcms (the Little-CMS library) to support the new architecture ppc64le (IBM Power PC Little Endian architecture) because ppc64 is big-endian and ppc64le is little-endian and lcms has a hard-coded check that assumes PowerPC is always big-endian which is incorrect on ppc64le. The fix is already in the main Little-CMS repository by this Git commit https://github.com/mm2/Little-CMS/commit/b4f5c91a2c1582bd284f0d0f49cb43e2c2235a79 (There are some cosmetic changes in the upstream patch.) It is not yet in the imported copy in Ghostscript. IBM will work with upstream to get the fix imported too. ------------------------------------------------------------------- Tue Sep 3 16:26:46 CEST 2013 - jsmeix@suse.de - Version upgrade to 9.10. Primarily a maintenance release. Highlights in this release include: * LittleCMS2 and libpng have both been updated to the latest versions. * The URW Postscript font set has been updated to the latest version, fixing many compatibility problems with the Adobe fonts. * The CUPS filters gstoraster and gstopxl have been removed from Ghostscript. Those filters are now provided by cups-filters (a free software package hosted by OpenPrinting) that contains all CUPS filters needed by CUPS under Linux (see also the openSUSE issue bnc#735404 comment#44 at https://bugzilla.novell.com/show_bug.cgi?id=735404#c44). For details see the News.htm and History9.htm files. - fix-undefined-operation.patch is no longer needed because it is fixed in the upstream sources. ------------------------------------------------------------------- Thu Aug 29 15:06:13 CEST 2013 - jsmeix@suse.de - Version upgrade to 9.10rc1 (release candidate for the 9.10 version). For details see the News.htm and History9.htm files. - Prepare spec files to build both releases and release candidates easily in the future by using special different version strings. - fix-undefined-operation.patch fixes http://bugs.ghostscript.com/show_bug.cgi?id=694546 - Removed BuildRequires for liblcms-devel because it is not needed when we build Ghostscript that works in compliance with upstream (see https://bugzilla.novell.com/show_bug.cgi?id=828751#c5). ------------------------------------------------------------------- Wed Mar 27 07:58:08 UTC 2013 - mmeister@suse.com - Added url as source. Please see http://en.opensuse.org/SourceUrls ------------------------------------------------------------------- Tue Feb 19 13:51:06 CET 2013 - jsmeix@suse.de - Version upgrade to 9.07. * As of this release (9.07), Ghostscript is distributed under the GNU Affero General Public License (AGPL). * Ghostscript has been extended to support file sizes >4Gb in particular reading and writing PDF files. * Color management enhancements. Full details of the color management features can be found in: GS9_Color_Management.pdf * The pdfwrite devices now supports linearized (or optimized for fast web view) output directly ("-dFastWebView"). * With the addition of linearisation to pdfwrite, pdfopt.ps has become redundant. Since it is difficult to maintain, has a number of bugs, and is believed not to work properly anyway, it is removed. Accordingly the pdfopt shell script that used pdfopt.ps is also removed. ------------------------------------------------------------------- Thu Jan 3 11:58:51 CET 2013 - jsmeix@suse.de - Provide libijs (that is not done via "configure --with-ijs") because libijs is needed by the pdftoijs filter in the cups-filters package (see the README file in cups-filters). ------------------------------------------------------------------- Thu Sep 27 12:02:51 UTC 2012 - mmeister@suse.com - Version upgrade to 9.06. Mainly a bugfix release. * pdfwrite announcements: pdfwrite now supports the creation of PDF/A-2 files. For further details see the NEWS file. * removed moribund dumphint tool, see History9.htm and http://bugs.ghostscript.com/show_bug.cgi?id=693223 ------------------------------------------------------------------- Mon Sep 24 10:44:57 UTC 2012 - idonmez@suse.com - "export SUSE_ASNEEDED=0" disables -Wl,--as-needed linker flags, see http://bugs.ghostscript.com/show_bug.cgi?id=693100 ------------------------------------------------------------------- Thu May 10 15:49:33 CEST 2012 - jsmeix@suse.de - Require Ghostscript's font packages because the Ghostscript package provides the "Fontmap" file /usr/share/ghostscript/<version>/Resource/Init/Fontmap.GS which lists Ghostscript's fonts but the fonts itself are provided in the separated packages ghostscript-fonts-std and ghostscript-fonts-other so that a RPM requirement is needed to make sure that Ghostscript has its fonts. - Extract the catalog of devices which are actually built-in in exactly this Ghostscript and provide it as catalog.devices in the Ghostscript package. ------------------------------------------------------------------- Fri Apr 27 10:40:53 CEST 2012 - jsmeix@suse.de - BuildRequires dbus-1-devel for "configure --enable-dbus" to have colord support in gstoraster (see the entry regarding "color management daemon" in doc/History9.htm). ------------------------------------------------------------------- Tue Apr 24 14:30:45 CEST 2012 - jsmeix@suse.de - Install documentation which is not installed by default (LICENSE doc/AUTHORS doc/COPYING doc/thirdparty.htm doc/WhatIsGS.htm doc/GS9_Color_Management.pdf doc/gs-vms.hlp doc/Ps2ps2.htm). - Add a link from SUSE's usual documentation directory (/usr/share/doc/packages/ghostscript/) to Ghostscript's documentation directory (/usr/share/ghostscript/9.05/doc/) because "configure --docdir=..." does not work. ------------------------------------------------------------------- Thu Apr 5 15:06:56 CEST 2012 - jsmeix@suse.de - Removed BuildRequires docbook-toys which is not needed (db2ps and db2pdf called in ijs/Makefile.am to make ijs_spec.ps and ijs_spec.pdf but neither of them is made - both are provided in the sources) but docbook-toys pulls in packages like texlive-bin-jadetex and texlive-jadetex which needlessly blow up the build system. ------------------------------------------------------------------- Wed Mar 28 10:59:21 CEST 2012 - jsmeix@suse.de - Require the basic fonts for Ghostscript (package ghostscript-fonts-std) and recommend the optional fonts (package ghostscript-fonts-other). ------------------------------------------------------------------- Fri Mar 23 11:32:28 CET 2012 - jsmeix@suse.de - Cleaned up BuildRequires. - Added ghostscript-mini.spec with minimal BuildRequires. - Explicitly specify configure --with-* versus --without-* in ghostscript.spec versus ghostscript-mini.spec to make the differences clear. ------------------------------------------------------------------- Fri Mar 16 10:27:01 CET 2012 - jsmeix@suse.de - Unfortunately ghostscript-library.spec and ghostscript-mini.spec have unversioned "Provides: ghostscript" and for RPM this means that both ghostscript-library and ghostscript-mini provide any version of ghostscript. Therefore any non-matching version of ghostscript-library and ghostscript-mini fulfill any RPM requirement for ghostscript in the ghostscript-x11 and ghostscript-devel sub-packages which is wrong. Therefore explicit conflicts with ghostscript-library and ghostscript-mini are specified in the ghostscript-x11 and ghostscript-devel sub-packages to avoid the mess. ------------------------------------------------------------------- Thu Mar 15 16:43:26 CET 2012 - jsmeix@suse.de - Configure --without-libpaper disables libpaper support because SUSE does not have libpaper. ------------------------------------------------------------------- Thu Mar 15 12:28:36 CET 2012 - jsmeix@suse.de - Configure --without-jasper and --enable-openjpeg because since Ghostscript 9.05 JasPer is deprecated and Ghostscript now ships modified OpenJPEG sources for JPEG2000 decoding (replacing JasPer). Performance, reliability and memory use whilst decoding JPX streams are all improved. Accordingly the BuildRequires libjasper-devel is removed. - Configure --without-ufst and --without-luratech because those are relevant to commercial releases only which would require a commercial license. - Added BuildRequires libtool which requires automake and automake requires autoconf to fix build requirements for openSUSE:Factory. ------------------------------------------------------------------- Fri Feb 24 16:48:06 CET 2012 - jsmeix@suse.de - Using fixed /usr/lib/cups/filter (no lib64) because CUPS in the Printing project uses it in any case. ------------------------------------------------------------------- Fri Feb 24 15:21:05 CET 2012 - jsmeix@suse.de - Adapt RPM dependencies to what is actually used in openSUSE:Factory (dated 22 Feb. 2012). ------------------------------------------------------------------- Thu Feb 16 15:36:21 CET 2012 - jsmeix@suse.de - Added RPM dependencies to make sure ghostscript-x11 and the main-package have exact matching version-release because both could have any kind of Ghostscript-internal dependencies. This is only an approximation to have ghostscript-x11 and the main-package from the same build where the main-package and its sub-package have been made but currently there is no clean way to specify a 'same build' RPM dependency. Therefore currently ghostscript-x11 and the main-package could have same version-release but nevertheless come from different projects/repositories (e.g. with different patches or whatever kind of differences). ------------------------------------------------------------------- Wed Feb 15 11:42:41 CET 2012 - jsmeix@suse.de - Split files which require X11 stuff into a ghostscript-x11 sub-package (currently only /usr/lib/ghostscript/9.05/X11.so) so that the ghostscript package can be installed without X11. ------------------------------------------------------------------- Thu Feb 9 11:34:33 CET 2012 - jsmeix@suse.de - Upgrade to version 9.05 (see bnc#735824): New simple ink-coverage device (inkconv). The ps2write device has a large number of improvements. Fixes and improvements for the CUPS Raster output device (in particular Ghostscript bug 691922 regarding color model). Renamed the PXL CUPS filter from "pstopxl" to "gstopxl". For details see the doc/News.htm file. - Removed "make cups" and "make cups-install" from spec file using "configure ... --with-install-cups" instead (new since version 9.04, see "configure --help"). ------------------------------------------------------------------- Tue Dec 13 15:18:06 UTC 2011 - jw@suse.com - Upgrade to version 9.04 (see bnc#735824): For details see the doc/News.htm file. - Added "make cups" and "make cups-install" to spec file. ------------------------------------------------------------------- Tue Mar 15 16:06:40 CET 2011 - jsmeix@suse.de - Initial ghostscript package.
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
