pool/ghostscript
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
102 Commits 2 Branches 0 Tags 210 MiB
064397ec60
Commit Graph

85 Commits

Author SHA256 Message Date
Johannes Meixner
064397ec60 Accepting request 945778 from home:jsmeix:branches:Printing 
Ghostscript security fix CVE-2021-45949 (bsc#1194304) including CVE-2021-45944 (bsc#1194303)

OBS-URL: https://build.opensuse.org/request/show/945778
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=148
 2022-01-12 09:39:16 +00:00
Johannes Meixner
5e8edce3ca Accepting request 917941 from home:jsmeix:branches:Printing 
Ghostscript security fix CVE-2021-3781 (bsc#1190381)

OBS-URL: https://build.opensuse.org/request/show/917941
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=147
 2021-09-10 11:35:00 +00:00
Johannes Meixner
e88f5efcbe Accepting request 894807 from home:jsmeix:branches:Printing 
Ghostscript version upgrade to 9.54.0

OBS-URL: https://build.opensuse.org/request/show/894807
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=145
 2021-05-21 12:57:31 +00:00
Johannes Meixner
15068e1197 Accepting request 885337 from home:wfrisch:branches:Printing 
Hardening: compile with PIC, link as PIE

OBS-URL: https://build.opensuse.org/request/show/885337
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=143
 2021-04-15 08:05:17 +00:00
Johannes Meixner
a660ee5ba6 Accepting request 881509 from home:dimstar:Factory 
- Do not rely on apparmor at all for the -mini flavor:
  + Drop apparmor-abstraction and apparmor-rpm-macros
    BuildRequires.
  + Do not package apparmor files.

Shame on me - this should have been included in the previous submission already
Sure, apparmor is a great thing for security with ghostscript, but considering
the -mini flavor only ever exists inside OBS during package builds, we can
perfectly get away with this.

Users will only ever get 'ghostscript' - the full version.

OBS-URL: https://build.opensuse.org/request/show/881509
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=141
 2021-03-29 08:29:21 +00:00
Johannes Meixner
44a55a5b9b OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=137 2021-03-16 12:10:05 +00:00
Johannes Meixner
8c4dc16072 Disabled 'Requires: this-is-only-for-build-envs' because this lets build of other packages fail in OBS projects where that stuff is not provided cf. https://build.opensuse.org/request/show/877992 
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=136
 2021-03-16 11:50:30 +00:00
Johannes Meixner
331fc679d0 Accepting request 877992 from home:dimstar:Factory 
- Do not require apparmor-abstractions: with the mini package being
  used only during build (and never on end user workstations),
  apparmor is not going to be anabled (build is in chroot/vm).
  Keeping the dep-chain of the -mini flavor as small as possible.
- Add extra safeguard Requires: this-is-only-for-build-envs: this
  symbol is not provided by any package outside of OBS, but OBS
  knows to ignore this dependency. This is just an additional
  safe-guard to stop users from installing this package, besides it
  not being part of the published distro repositories.

OBS-URL: https://build.opensuse.org/request/show/877992
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=135
 2021-03-16 11:26:35 +00:00
Johannes Meixner
d457c8966e Comment in spec file that explains why "Provides: ghostscript_any" is there, cf. https://build.opensuse.org/request/show/877083 
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=133
 2021-03-08 10:35:08 +00:00
Johannes Meixner
3914f34250 Accepting request 877083 from home:dimstar:Factory 
- Provide ghostscript_any by ghostscript-mini: this is a valid
  replacement for consumers.

OBS-URL: https://build.opensuse.org/request/show/877083
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=132
 2021-03-08 10:18:16 +00:00
Johannes Meixner
693fdde18f Accepting request 843001 from home:jsmeix:branches:Printing 
Ghostscript version upgrade to 9.53.3 that fixes boo#1177922 and fixes compilation with FreeType 2.10.3+

OBS-URL: https://build.opensuse.org/request/show/843001
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=130
 2020-10-20 15:14:31 +00:00
Johannes Meixner
5e3250a567 Accepting request 823076 from home:jsmeix:branches:Printing 
Ghostscript security fix CVE-2020-15900 (bsc#1174415)

OBS-URL: https://build.opensuse.org/request/show/823076
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=128
 2020-07-28 08:03:20 +00:00
Johannes Meixner
03d1d391b8 Accepting request 798866 from home:jsmeix:branches:Printing 
Ghostscript version upgrade to 9.52 which is primarily a general security upgrade that fixes in particular CVE-2020-12268 (bsc#1170603)

OBS-URL: https://build.opensuse.org/request/show/798866
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=126
 2020-04-29 10:44:01 +00:00
Martin Wilck
cb34c9d32b Accepting request 769173 from home:StefanBruens:branches:Printing 
- Use system openjpeg2 on Tumbleweed/Factory.

Also see https://build.opensuse.org/request/show/769172

OBS-URL: https://build.opensuse.org/request/show/769173
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=124
 2020-02-03 09:20:23 +00:00
Dr. Werner Fink
9db5869058 Add overseen fix for CVE-2019-10216 
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=120
 2019-09-16 13:20:05 +00:00
Dr. Werner Fink
d137c48cfe Typo in ghostscript-mini.spec 
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=119
 2019-09-16 12:32:08 +00:00
Dr. Werner Fink
ac4ca4e97e Add two patch to fix security bugs 
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=118
 2019-09-16 12:16:35 +00:00
Tomáš Chvátal
a94b87d806 Accepting request 725214 from home:jengelh:branches:Printing 
- Update RPM groups.

OBS-URL: https://build.opensuse.org/request/show/725214
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=117
 2019-09-09 07:14:34 +00:00
Dr. Werner Fink
83629d3344 Accepting request 724711 from home:WernerFink:branches:Printing 
- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with ist wrapper script

- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with ist wrapper script

OBS-URL: https://build.opensuse.org/request/show/724711
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=115
 2019-08-20 10:24:25 +00:00
Johannes Meixner
913dde5df3 Accepting request 701733 from home:jsegitz:branches:Printing 
- Set AA profile to complain and added fixes for ps2epsi (boo#1134327)

OBS-URL: https://build.opensuse.org/request/show/701733
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=113
 2019-05-09 08:39:39 +00:00
Johannes Meixner
555c9ea5b2 Accepting request 691555 from home:jsmeix:branches:Printing 
Ghostscript version upgrade to 9.27

OBS-URL: https://build.opensuse.org/request/show/691555
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=111
 2019-04-04 14:27:19 +00:00
Johannes Meixner
2a57413541 Accepting request 686126 from home:jsegitz:ghostscript 
- Added AA rules for dvips (bsc#1127934)
- Allow execution of dirname (bsc#1128697)
- Allow execution of hpijs (bsc#1128467). For now this is in 
  complain mode
- Sane profile name "ghostscript", moved profile from
  /etc/apparmor.d/usr.bin.gs to /etc/apparmor.d/ghostscript
  (bsc#1128607)
- Improved AA packaging (bsc#1128608)
  Thanks to Christian Boltz for his help

- Fix IJS printing problem (bsc#1128467)
  * added ijs_exec_server_dont_use_sh.patch
  * allow exec'ing hpijs in apparmor profile

- Added AA rules for dvips (bsc#1127934)
- Allow execution of dirname (bsc#1128697)
- Allow execution of hpijs (bsc#1128467). For now this is in 
  complain mode
- Sane profile name "ghostscript", moved profile from
  /etc/apparmor.d/usr.bin.gs to /etc/apparmor.d/ghostscript
  (bsc#1128607)
- Improved AA packaging (bsc#1128608)
  Thanks to Christian Boltz for his help

OBS-URL: https://build.opensuse.org/request/show/686126
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=109
 2019-03-22 11:27:22 +00:00
Tomáš Chvátal
0dd7230d55 Accepting request 682767 from home:mwilck:branches:Printing 
- Fix IJS printing problem (bsc#1128467)
  * added ijs_exec_server_dont_use_sh.patch
  * allow exec'ing hpijs in apparmor profile

OBS-URL: https://build.opensuse.org/request/show/682767
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=107
 2019-03-08 12:28:32 +00:00
Johannes Meixner
3d3f520cee Aligned ghostscript-mini.changes with ghostscript.changes 
regarding the added apparmor_usr.bin.gs.

OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=105
 2019-02-14 09:26:43 +00:00
Johannes Meixner
cb3aac83a7 Accepting request 673382 from home:jsegitz:branches:Printing 
- Added apparmor_usr.bin.gs. This profile prevents execution of 
  executables to serve as hardening for the binaries that process
  ghostscript. This is of limited use but prevents simple exploits.

OBS-URL: https://build.opensuse.org/request/show/673382
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=104
 2019-02-12 10:26:47 +00:00
Johannes Meixner
ce1ba2ad82 Accepting request 668140 from home:jsmeix:branches:Printing 
Ghostscript security fix upgrade (purely a security fix) to fix CVE-2019-6116 bsc#1122319

OBS-URL: https://build.opensuse.org/request/show/668140
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=102
 2019-01-23 16:44:20 +00:00
Tomáš Chvátal
da972996b4 Accepting request 664448 from home:weberho:branches:Printing 
- ghostscript-2.26-subclassing-devices-fix-put_image-method.patch
  fixes Ghostscript issue #700315 and bsc#1121490
  https://bugs.ghostscript.com/show_bug.cgi?id=700315
  Segfault in GS 9.26 with certain PDFs with -dLastPage=1

OBS-URL: https://build.opensuse.org/request/show/664448
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=101
 2019-01-22 12:10:44 +00:00
Johannes Meixner
98164e5415 Accepting request 650710 from home:jsmeix:branches:Printing 
Version upgrade to 9.26 (Purely security and a few bug fixes)

OBS-URL: https://build.opensuse.org/request/show/650710
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=98
 2018-11-21 14:19:24 +00:00
Johannes Meixner
f82c4ed7e8 Accepting request 647580 from home:jsmeix:branches:Printing 
Version upgrade to 9.26rc1 (Purely security and a few bug fixes)

OBS-URL: https://build.opensuse.org/request/show/647580
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=97
 2018-11-09 12:40:49 +00:00
Johannes Meixner
07ebe5c7a1 Accepting request 635772 from home:jsmeix:branches:Printing 
Ghostscript version upgrade to 9.25 which provides fixes for regressions in Ghostscript 9.24 and more security bufgixes, see https://www.ghostscript.com/doc/9.25/News.htm

OBS-URL: https://build.opensuse.org/request/show/635772
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=95
 2018-09-14 13:41:35 +00:00
Johannes Meixner
c0eb0b9d23 Accepting request 635540 from home:jsmeix:branches:Printing 
ghostscript version upgrade to 9.25rc1 (first release candidate for 9.25) which provides in particular more security bufgixes, see https://ghostscript.com/pipermail/gs-devel/2018-September/010098.html

OBS-URL: https://build.opensuse.org/request/show/635540
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=94
 2018-09-13 13:36:29 +00:00
Johannes Meixner
5ee9ca839d Accepting request 635499 from home:jsmeix:branches:Printing 
ghostscript version upgrade to 9.24 which provides in particular security bufgixes, see https://www.ghostscript.com/doc/9.24/News.htm

OBS-URL: https://build.opensuse.org/request/show/635499
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=93
 2018-09-13 09:30:13 +00:00
Johannes Meixner
1829075053 Accepting request 614286 from home:jsmeix:branches:Printing 
CVE-2018-10194.patch fixes stack-based buffer overflow (bsc#1090099)

OBS-URL: https://build.opensuse.org/request/show/614286
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=91
 2018-06-05 13:32:09 +00:00
Johannes Meixner
dc0a03b301 Accepting request 590295 from home:jsmeix:branches:Printing 
Ghostscript version upgrade to 9.23 (boo#1082896 and boo#1074266)

OBS-URL: https://build.opensuse.org/request/show/590295
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=89
 2018-03-22 12:49:03 +00:00
Johannes Meixner
7fdc510d60 Accepting request 587895 from home:jsmeix:branches:Printing 
Ghostscript 9.23rc1 uses lcms2 from SUSE and does no longer require any fonts packages (boo#1082896)

OBS-URL: https://build.opensuse.org/request/show/587895
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=88
 2018-03-16 13:33:21 +00:00
Johannes Meixner
540378ba24 Accepting request 587502 from home:jsmeix:branches:Printing 
Ghostscript version upgrade to 9.23rc1 (first release candidate for 9.23)

OBS-URL: https://build.opensuse.org/request/show/587502
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=87
 2018-03-15 12:57:22 +00:00
Johannes Meixner
9ce317b75a Accepting request 581052 from home:StefanBruens:branches:Printing 
- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging

OBS-URL: https://build.opensuse.org/request/show/581052
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=86
 2018-03-12 10:33:44 +00:00
Johannes Meixner
3fe572792f Accepting request 580811 from home:FunkyM:branches:Printing 
- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Fuji Xerox and Dell
  Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets

OBS-URL: https://build.opensuse.org/request/show/580811
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=84
 2018-02-28 10:35:32 +00:00
Johannes Meixner
d041b75502 Accepting request 546685 from home:jsmeix:branches:Printing 
Ghostscript version upgrade to 9.22 for openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15

OBS-URL: https://build.opensuse.org/request/show/546685
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=82
 2017-11-30 10:44:29 +00:00
Johannes Meixner
ec293cdc8d Accepting request 526288 from home:jsmeix:branches:Printing 
Ghostscript version upgrade to 9.22rc1 (first release candidate for 9.22)

OBS-URL: https://build.opensuse.org/request/show/526288
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=81
 2017-09-15 08:07:56 +00:00
Johannes Meixner
404156ec6d Accepting request 501324 from home:dmolkentin:branches:Printing 
- CVE-2017-7207.patch fixes a NULL pointer dereference in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)

OBS-URL: https://build.opensuse.org/request/show/501324
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=79
 2017-06-06 09:08:41 +00:00
Johannes Meixner
30603cab46 Accepting request 492484 from home:jsmeix:branches:Printing 
CVE-2017-8291.patch fixes a type confusion in .rsdparams and .eqproc see https://bugs.ghostscript.com/show_bug.cgi?id=697808 and https://bugs.ghostscript.com/show_bug.cgi?id=697799 (bsc#1036453)

OBS-URL: https://build.opensuse.org/request/show/492484
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=77
 2017-05-02 13:11:51 +00:00
Johannes Meixner
1ec563fa1e Accepting request 487561 from home:jsmeix:branches:Printing 
Ghostscript version upgrade to 9.21

OBS-URL: https://build.opensuse.org/request/show/487561
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=76
 2017-04-12 12:35:15 +00:00
Johannes Meixner
7fb4de27c7 Accepting request 452987 from home:StefanBruens:branches:Printing 
Reversed the unintentional Group tag movement, otherwise unchanged

OBS-URL: https://build.opensuse.org/request/show/452987
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=74
 2017-01-30 13:16:52 +00:00
Johannes Meixner
2e708fde52 Accepting request 435738 from home:jsmeix:branches:Printing 
Ghostscript security update that fixes (CVE-2013-5653 is already fixed in the 9.20 sources) CVE-2016-7976 CVE-2016-7977 CVE-2016-7978 CVE-2016-7979 (all bsc#1001951) and CVE-2016-8602 (bsc#1004237)

OBS-URL: https://build.opensuse.org/request/show/435738
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=72
 2016-10-17 12:34:08 +00:00
Johannes Meixner
7572456c4d Accepting request 431513 from home:jsmeix:branches:Printing 
Version upgrade to 9.20

OBS-URL: https://build.opensuse.org/request/show/431513
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=70
 2016-09-30 11:42:02 +00:00
Johannes Meixner
0a14318d2b Accepting request 427903 from home:jsmeix:branches:Printing 
Version upgrade to 9.20rc1 (first release candidate for 9.20)

OBS-URL: https://build.opensuse.org/request/show/427903
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=69
 2016-09-15 10:00:01 +00:00
Johannes Meixner
77c12adcd5 Accepting request 378927 from home:jsmeix:branches:Printing 
Ghostscript version upgrade to 9.19

OBS-URL: https://build.opensuse.org/request/show/378927
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=67
 2016-03-23 16:06:46 +00:00
Johannes Meixner
f5c3d843dc Accepting request 375066 from home:jsmeix:branches:Printing 
Version upgrade to 9.19rc1 (first release candidate for 9.18)

OBS-URL: https://build.opensuse.org/request/show/375066
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=65
 2016-03-18 10:30:37 +00:00
Johannes Meixner
5b0baf7ad9 Added missing "BuildRequires: libjpeg-devel" to ghostscript-mini.spec 
that was added to ghostscript.spec by the latest submitrequest.

OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=63
 2015-11-27 15:27:55 +00:00