Commit Graph

77 Commits

Author SHA256 Message Date
Tomáš Chvátal
42553d6db8 Accepting request 732679 from home:jsegitz:branches:Printing
- Made ghostscript profile enforcing and limit it to the ghostscript
  binaries (bsc#1150338)

OBS-URL: https://build.opensuse.org/request/show/732679
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=122
2019-09-24 08:21:58 +00:00
Dr. Werner Fink
9db5869058 Add overseen fix for CVE-2019-10216
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=120
2019-09-16 13:20:05 +00:00
Dr. Werner Fink
ac4ca4e97e Add two patch to fix security bugs
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=118
2019-09-16 12:16:35 +00:00
Tomáš Chvátal
a94b87d806 Accepting request 725214 from home:jengelh:branches:Printing
- Update RPM groups.

OBS-URL: https://build.opensuse.org/request/show/725214
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=117
2019-09-09 07:14:34 +00:00
Dr. Werner Fink
83629d3344 Accepting request 724711 from home:WernerFink:branches:Printing
- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with ist wrapper script

- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with ist wrapper script

OBS-URL: https://build.opensuse.org/request/show/724711
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=115
2019-08-20 10:24:25 +00:00
Johannes Meixner
913dde5df3 Accepting request 701733 from home:jsegitz:branches:Printing
- Set AA profile to complain and added fixes for ps2epsi (boo#1134327)

OBS-URL: https://build.opensuse.org/request/show/701733
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=113
2019-05-09 08:39:39 +00:00
Johannes Meixner
555c9ea5b2 Accepting request 691555 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.27

OBS-URL: https://build.opensuse.org/request/show/691555
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=111
2019-04-04 14:27:19 +00:00
Johannes Meixner
2a57413541 Accepting request 686126 from home:jsegitz:ghostscript
- Added AA rules for dvips (bsc#1127934)
- Allow execution of dirname (bsc#1128697)
- Allow execution of hpijs (bsc#1128467). For now this is in 
  complain mode
- Sane profile name "ghostscript", moved profile from
  /etc/apparmor.d/usr.bin.gs to /etc/apparmor.d/ghostscript
  (bsc#1128607)
- Improved AA packaging (bsc#1128608)
  Thanks to Christian Boltz for his help

- Fix IJS printing problem (bsc#1128467)
  * added ijs_exec_server_dont_use_sh.patch
  * allow exec'ing hpijs in apparmor profile

- Added AA rules for dvips (bsc#1127934)
- Allow execution of dirname (bsc#1128697)
- Allow execution of hpijs (bsc#1128467). For now this is in 
  complain mode
- Sane profile name "ghostscript", moved profile from
  /etc/apparmor.d/usr.bin.gs to /etc/apparmor.d/ghostscript
  (bsc#1128607)
- Improved AA packaging (bsc#1128608)
  Thanks to Christian Boltz for his help

OBS-URL: https://build.opensuse.org/request/show/686126
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=109
2019-03-22 11:27:22 +00:00
Tomáš Chvátal
0dd7230d55 Accepting request 682767 from home:mwilck:branches:Printing
- Fix IJS printing problem (bsc#1128467)
  * added ijs_exec_server_dont_use_sh.patch
  * allow exec'ing hpijs in apparmor profile

OBS-URL: https://build.opensuse.org/request/show/682767
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=107
2019-03-08 12:28:32 +00:00
Johannes Meixner
3d3f520cee Aligned ghostscript-mini.changes with ghostscript.changes
regarding the added apparmor_usr.bin.gs.

OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=105
2019-02-14 09:26:43 +00:00
Johannes Meixner
cb3aac83a7 Accepting request 673382 from home:jsegitz:branches:Printing
- Added apparmor_usr.bin.gs. This profile prevents execution of 
  executables to serve as hardening for the binaries that process
  ghostscript. This is of limited use but prevents simple exploits.

OBS-URL: https://build.opensuse.org/request/show/673382
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=104
2019-02-12 10:26:47 +00:00
Johannes Meixner
ce1ba2ad82 Accepting request 668140 from home:jsmeix:branches:Printing
Ghostscript security fix upgrade (purely a security fix) to fix CVE-2019-6116 bsc#1122319

OBS-URL: https://build.opensuse.org/request/show/668140
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=102
2019-01-23 16:44:20 +00:00
Tomáš Chvátal
da972996b4 Accepting request 664448 from home:weberho:branches:Printing
- ghostscript-2.26-subclassing-devices-fix-put_image-method.patch
  fixes Ghostscript issue #700315 and bsc#1121490
  https://bugs.ghostscript.com/show_bug.cgi?id=700315
  Segfault in GS 9.26 with certain PDFs with -dLastPage=1

OBS-URL: https://build.opensuse.org/request/show/664448
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=101
2019-01-22 12:10:44 +00:00
Johannes Meixner
f0089d8f2b Accepting request 652826 from home:jsmeix:branches:Printing
Version upgrade to 9.26 (Purely security and a few bug fixes)

OBS-URL: https://build.opensuse.org/request/show/652826
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=99
2018-11-30 09:32:47 +00:00
Johannes Meixner
98164e5415 Accepting request 650710 from home:jsmeix:branches:Printing
Version upgrade to 9.26 (Purely security and a few bug fixes)

OBS-URL: https://build.opensuse.org/request/show/650710
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=98
2018-11-21 14:19:24 +00:00
Johannes Meixner
f82c4ed7e8 Accepting request 647580 from home:jsmeix:branches:Printing
Version upgrade to 9.26rc1 (Purely security and a few bug fixes)

OBS-URL: https://build.opensuse.org/request/show/647580
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=97
2018-11-09 12:40:49 +00:00
Johannes Meixner
07ebe5c7a1 Accepting request 635772 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.25 which provides fixes for regressions in Ghostscript 9.24 and more security bufgixes, see https://www.ghostscript.com/doc/9.25/News.htm

OBS-URL: https://build.opensuse.org/request/show/635772
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=95
2018-09-14 13:41:35 +00:00
Johannes Meixner
c0eb0b9d23 Accepting request 635540 from home:jsmeix:branches:Printing
ghostscript version upgrade to 9.25rc1 (first release candidate for 9.25) which provides in particular more security bufgixes, see https://ghostscript.com/pipermail/gs-devel/2018-September/010098.html

OBS-URL: https://build.opensuse.org/request/show/635540
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=94
2018-09-13 13:36:29 +00:00
Johannes Meixner
5ee9ca839d Accepting request 635499 from home:jsmeix:branches:Printing
ghostscript version upgrade to 9.24 which provides in particular security bufgixes, see https://www.ghostscript.com/doc/9.24/News.htm

OBS-URL: https://build.opensuse.org/request/show/635499
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=93
2018-09-13 09:30:13 +00:00
Johannes Meixner
1829075053 Accepting request 614286 from home:jsmeix:branches:Printing
CVE-2018-10194.patch fixes stack-based buffer overflow (bsc#1090099)

OBS-URL: https://build.opensuse.org/request/show/614286
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=91
2018-06-05 13:32:09 +00:00
Johannes Meixner
dc0a03b301 Accepting request 590295 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.23 (boo#1082896 and boo#1074266)

OBS-URL: https://build.opensuse.org/request/show/590295
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=89
2018-03-22 12:49:03 +00:00
Johannes Meixner
7fdc510d60 Accepting request 587895 from home:jsmeix:branches:Printing
Ghostscript 9.23rc1 uses lcms2 from SUSE and does no longer require any fonts packages (boo#1082896)

OBS-URL: https://build.opensuse.org/request/show/587895
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=88
2018-03-16 13:33:21 +00:00
Johannes Meixner
540378ba24 Accepting request 587502 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.23rc1 (first release candidate for 9.23)

OBS-URL: https://build.opensuse.org/request/show/587502
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=87
2018-03-15 12:57:22 +00:00
Johannes Meixner
9ce317b75a Accepting request 581052 from home:StefanBruens:branches:Printing
- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging

OBS-URL: https://build.opensuse.org/request/show/581052
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=86
2018-03-12 10:33:44 +00:00
Johannes Meixner
3fe572792f Accepting request 580811 from home:FunkyM:branches:Printing
- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Fuji Xerox and Dell
  Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets

OBS-URL: https://build.opensuse.org/request/show/580811
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=84
2018-02-28 10:35:32 +00:00
Johannes Meixner
d041b75502 Accepting request 546685 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.22 for openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15

OBS-URL: https://build.opensuse.org/request/show/546685
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=82
2017-11-30 10:44:29 +00:00
Johannes Meixner
ec293cdc8d Accepting request 526288 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.22rc1 (first release candidate for 9.22)

OBS-URL: https://build.opensuse.org/request/show/526288
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=81
2017-09-15 08:07:56 +00:00
Johannes Meixner
404156ec6d Accepting request 501324 from home:dmolkentin:branches:Printing
- CVE-2017-7207.patch fixes a NULL pointer dereference in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)

OBS-URL: https://build.opensuse.org/request/show/501324
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=79
2017-06-06 09:08:41 +00:00
Johannes Meixner
30603cab46 Accepting request 492484 from home:jsmeix:branches:Printing
CVE-2017-8291.patch fixes a type confusion in .rsdparams and .eqproc see https://bugs.ghostscript.com/show_bug.cgi?id=697808 and https://bugs.ghostscript.com/show_bug.cgi?id=697799 (bsc#1036453)

OBS-URL: https://build.opensuse.org/request/show/492484
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=77
2017-05-02 13:11:51 +00:00
Johannes Meixner
1ec563fa1e Accepting request 487561 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.21

OBS-URL: https://build.opensuse.org/request/show/487561
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=76
2017-04-12 12:35:15 +00:00
Johannes Meixner
7fb4de27c7 Accepting request 452987 from home:StefanBruens:branches:Printing
Reversed the unintentional Group tag movement, otherwise unchanged

OBS-URL: https://build.opensuse.org/request/show/452987
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=74
2017-01-30 13:16:52 +00:00
Johannes Meixner
2e708fde52 Accepting request 435738 from home:jsmeix:branches:Printing
Ghostscript security update that fixes (CVE-2013-5653 is already fixed in the 9.20 sources) CVE-2016-7976 CVE-2016-7977 CVE-2016-7978 CVE-2016-7979 (all bsc#1001951) and CVE-2016-8602 (bsc#1004237)

OBS-URL: https://build.opensuse.org/request/show/435738
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=72
2016-10-17 12:34:08 +00:00
Johannes Meixner
7572456c4d Accepting request 431513 from home:jsmeix:branches:Printing
Version upgrade to 9.20

OBS-URL: https://build.opensuse.org/request/show/431513
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=70
2016-09-30 11:42:02 +00:00
Johannes Meixner
0a14318d2b Accepting request 427903 from home:jsmeix:branches:Printing
Version upgrade to 9.20rc1 (first release candidate for 9.20)

OBS-URL: https://build.opensuse.org/request/show/427903
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=69
2016-09-15 10:00:01 +00:00
Johannes Meixner
77c12adcd5 Accepting request 378927 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.19

OBS-URL: https://build.opensuse.org/request/show/378927
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=67
2016-03-23 16:06:46 +00:00
Johannes Meixner
3071d3c69a Fixed typo in changes: "first release candidate for 9.19"
(was before "first release candidate for 9.18")

Aded that "ijs-config is no longer provided" to changes.

OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=66
2016-03-18 12:44:53 +00:00
Johannes Meixner
f5c3d843dc Accepting request 375066 from home:jsmeix:branches:Printing
Version upgrade to 9.19rc1 (first release candidate for 9.18)

OBS-URL: https://build.opensuse.org/request/show/375066
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=65
2016-03-18 10:30:37 +00:00
Johannes Meixner
b1c7d2604f Accepting request 345197 from home:jsmeix:branches:Printing
Do no longer use the library sources for freetype jpeg libpng tiff zlib that are included in Ghostscript upstream tarball for building but use instead the SUSE libraries.

OBS-URL: https://build.opensuse.org/request/show/345197
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=62
2015-11-19 12:58:39 +00:00
Johannes Meixner
28df8a335f - An incompatible change appeared when building other software
with Ghostscript 9.18.
  Since version 9.18 Ghostscript does no longer provide
  e_<SomeError> (e.g. e_NeedInput) in its header files
  (gserrors.h and ierrors.h).
  When building other software with Ghostscript 9.18
  gs_error_<SomeError> (e.g. gs_error_NeedInput)
  must be used, see boo#953149 and
  http://bugs.ghostscript.com/show_bug.cgi?id=696317

OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=60
2015-11-05 12:46:18 +00:00
Johannes Meixner
825afa6f1c Accepting request 341659 from home:jsmeix:branches:Printing
Ghostscript 9.18 upstream fix for http://bugs.ghostscript.com/show_bug.cgi?id=696301 so that gserrors.h is again installed that is needed by several other packages to build (in particular texlive, libspectre, gimp,...)

OBS-URL: https://build.opensuse.org/request/show/341659
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=59
2015-10-30 11:46:47 +00:00
Johannes Meixner
1bb98aba3f Accepting request 338022 from home:jsmeix:branches:Printing
Ghostscript 9.18 upstream fix for http://bugs.ghostscript.com/show_bug.cgi?id=696246

OBS-URL: https://build.opensuse.org/request/show/338022
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=58
2015-10-12 09:24:10 +00:00
Johannes Meixner
a1523b6cd0 Accepting request 336666 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.18

OBS-URL: https://build.opensuse.org/request/show/336666
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=57
2015-10-06 09:05:07 +00:00
Johannes Meixner
59c03fa4b8 Accepting request 334736 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.18rc2 (second release candidate for 9.18)

OBS-URL: https://build.opensuse.org/request/show/334736
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=56
2015-09-29 09:42:10 +00:00
Johannes Meixner
15c8faebef Accepting request 333702 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.18rc1 (first release candidate for 9.18)

OBS-URL: https://build.opensuse.org/request/show/333702
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=55
2015-09-25 10:17:54 +00:00
Johannes Meixner
cb339b0e86 Accepting request 319418 from home:jsmeix:branches:Printing
Fixed CVE-2015-3228 (bsc#939342)

OBS-URL: https://build.opensuse.org/request/show/319418
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=53
2015-07-29 13:53:34 +00:00
Johannes Meixner
95202a4042 Accepting request 293795 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.16

OBS-URL: https://build.opensuse.org/request/show/293795
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=51
2015-03-31 13:42:40 +00:00
Johannes Meixner
edc9d0cc50 Accepting request 293106 from home:jsmeix:branches:Printing
Version upgrade to 9.16rc2 (second release candidate for 9.16) for testing if it works. Now it also builds for SLE_11_SP3.

OBS-URL: https://build.opensuse.org/request/show/293106
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=50
2015-03-25 14:14:43 +00:00
Johannes Meixner
6a7f3ad3b8 Accepting request 292076 from home:jsmeix:branches:Printing
Version upgrade to 9.16rc2 (second release candidate for 9.16) for testing if it works.

OBS-URL: https://build.opensuse.org/request/show/292076
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=49
2015-03-20 16:52:02 +00:00
Johannes Meixner
cb1a52951f - For SLE12 build it with traditional CUPS 1.5.4 to ensure
it works on SLE12 both with CUPS 1.7.5 and CUPS 1.5.4.

OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=48
2015-03-20 09:54:15 +00:00
Johannes Meixner
9876c3a3b9 Accepting request 253097 from home:jsmeix:branches:Printing
More descriptive texts and upstream bug regarding re-added ppc64le-support.patch

OBS-URL: https://build.opensuse.org/request/show/253097
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=46
2014-09-29 12:56:54 +00:00