Commit Graph

107 Commits

Author SHA256 Message Date
a5e7be73bb Accepting request 989807 from home:dirkmueller:Factory
- update to 9.56.1:
  * New PDF Interpreter: This is an entirely new implementation written in C
    (rather than PostScript, as before)
  * Calling Ghostscript via the GS API is now thread safe. The one limitation
    is that the X11 devices for Unix-like systems (x11, x11alpha, x11cmyk,
    x11cmyk2, x11cmyk4, x11cmyk8, x11gray2, x11gray4 and x11mono) cannot be
    made thread safe, due to their interaction with the X11 server, those
    devices have been modified to only allow one instance in an executable.
  * The PSD output device now writes ICC profiles to their output files, for
    improved color fidelity.
  * Our efforts in code hygiene and maintainability continue.
  * The usual round of bug fixes, compatibility changes, and incremental
    improvements.
  * We have added the capability to build with the Tesseract OCR
    engine. In such a build, new devices are available (pdfocr8/pdfocr24/
    pdfocr32) which render the output file to an image, OCR that image, and
    output the image "wrapped" up as a PDF file, with the OCR generated text
    information included as "invisible" text (in PDF terms, text rendering mode
    3).
- drop CVE-2021-3781.patch, CVE-2021-45949.patch: upstream

- use _multibuild

OBS-URL: https://build.opensuse.org/request/show/989807
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=155
2022-07-18 14:12:49 +00:00
Johannes Meixner
ffee26cdec Accepting request 969841 from home:dirkmueller:Factory
- use system zlib (bsc#1198449)

OBS-URL: https://build.opensuse.org/request/show/969841
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=153
2022-07-06 12:47:53 +00:00
Johannes Meixner
f7da6853e6 OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=151 2022-04-11 08:08:15 +00:00
Johannes Meixner
14d22cd53e OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=150 2022-04-11 08:06:37 +00:00
Johannes Meixner
38e2c0319c Accepting request 967447 from home:fcrozat:branches:Printing
- Do not requires apparmor-abstractions, it is not mandatory to
  use ghostscript.

OBS-URL: https://build.opensuse.org/request/show/967447
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=149
2022-04-08 09:30:18 +00:00
Johannes Meixner
064397ec60 Accepting request 945778 from home:jsmeix:branches:Printing
Ghostscript security fix CVE-2021-45949 (bsc#1194304) including CVE-2021-45944 (bsc#1194303)

OBS-URL: https://build.opensuse.org/request/show/945778
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=148
2022-01-12 09:39:16 +00:00
Johannes Meixner
5e8edce3ca Accepting request 917941 from home:jsmeix:branches:Printing
Ghostscript security fix CVE-2021-3781 (bsc#1190381)

OBS-URL: https://build.opensuse.org/request/show/917941
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=147
2021-09-10 11:35:00 +00:00
Johannes Meixner
e88f5efcbe Accepting request 894807 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.54.0

OBS-URL: https://build.opensuse.org/request/show/894807
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=145
2021-05-21 12:57:31 +00:00
Johannes Meixner
15068e1197 Accepting request 885337 from home:wfrisch:branches:Printing
Hardening: compile with PIC, link as PIE

OBS-URL: https://build.opensuse.org/request/show/885337
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=143
2021-04-15 08:05:17 +00:00
Johannes Meixner
a660ee5ba6 Accepting request 881509 from home:dimstar:Factory
- Do not rely on apparmor at all for the -mini flavor:
  + Drop apparmor-abstraction and apparmor-rpm-macros
    BuildRequires.
  + Do not package apparmor files.

Shame on me - this should have been included in the previous submission already
Sure, apparmor is a great thing for security with ghostscript, but considering
the -mini flavor only ever exists inside OBS during package builds, we can
perfectly get away with this.

Users will only ever get 'ghostscript' - the full version.

OBS-URL: https://build.opensuse.org/request/show/881509
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=141
2021-03-29 08:29:21 +00:00
Johannes Meixner
295bf60893 OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=139 2021-03-16 12:11:47 +00:00
Johannes Meixner
008b8cb457 OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=138 2021-03-16 12:10:33 +00:00
Johannes Meixner
44a55a5b9b OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=137 2021-03-16 12:10:05 +00:00
Johannes Meixner
8c4dc16072 Disabled 'Requires: this-is-only-for-build-envs' because this lets build of other packages fail in OBS projects where that stuff is not provided cf. https://build.opensuse.org/request/show/877992
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=136
2021-03-16 11:50:30 +00:00
Johannes Meixner
331fc679d0 Accepting request 877992 from home:dimstar:Factory
- Do not require apparmor-abstractions: with the mini package being
  used only during build (and never on end user workstations),
  apparmor is not going to be anabled (build is in chroot/vm).
  Keeping the dep-chain of the -mini flavor as small as possible.
- Add extra safeguard Requires: this-is-only-for-build-envs: this
  symbol is not provided by any package outside of OBS, but OBS
  knows to ignore this dependency. This is just an additional
  safe-guard to stop users from installing this package, besides it
  not being part of the published distro repositories.

OBS-URL: https://build.opensuse.org/request/show/877992
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=135
2021-03-16 11:26:35 +00:00
Johannes Meixner
a99fa23197 Comment in spec file that explains why "Provides: ghostscript_any" is there, cf. https://build.opensuse.org/request/show/877083
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=134
2021-03-08 10:36:51 +00:00
Johannes Meixner
d457c8966e Comment in spec file that explains why "Provides: ghostscript_any" is there, cf. https://build.opensuse.org/request/show/877083
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=133
2021-03-08 10:35:08 +00:00
Johannes Meixner
3914f34250 Accepting request 877083 from home:dimstar:Factory
- Provide ghostscript_any by ghostscript-mini: this is a valid
  replacement for consumers.

OBS-URL: https://build.opensuse.org/request/show/877083
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=132
2021-03-08 10:18:16 +00:00
Johannes Meixner
693fdde18f Accepting request 843001 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.53.3 that fixes boo#1177922 and fixes compilation with FreeType 2.10.3+

OBS-URL: https://build.opensuse.org/request/show/843001
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=130
2020-10-20 15:14:31 +00:00
Johannes Meixner
5e3250a567 Accepting request 823076 from home:jsmeix:branches:Printing
Ghostscript security fix CVE-2020-15900 (bsc#1174415)

OBS-URL: https://build.opensuse.org/request/show/823076
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=128
2020-07-28 08:03:20 +00:00
Johannes Meixner
03d1d391b8 Accepting request 798866 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.52 which is primarily a general security upgrade that fixes in particular CVE-2020-12268 (bsc#1170603)

OBS-URL: https://build.opensuse.org/request/show/798866
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=126
2020-04-29 10:44:01 +00:00
Martin Wilck
cb34c9d32b Accepting request 769173 from home:StefanBruens:branches:Printing
- Use system openjpeg2 on Tumbleweed/Factory.

Also see https://build.opensuse.org/request/show/769172

OBS-URL: https://build.opensuse.org/request/show/769173
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=124
2020-02-03 09:20:23 +00:00
Tomáš Chvátal
42553d6db8 Accepting request 732679 from home:jsegitz:branches:Printing
- Made ghostscript profile enforcing and limit it to the ghostscript
  binaries (bsc#1150338)

OBS-URL: https://build.opensuse.org/request/show/732679
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=122
2019-09-24 08:21:58 +00:00
Dr. Werner Fink
9db5869058 Add overseen fix for CVE-2019-10216
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=120
2019-09-16 13:20:05 +00:00
Dr. Werner Fink
d137c48cfe Typo in ghostscript-mini.spec
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=119
2019-09-16 12:32:08 +00:00
Dr. Werner Fink
ac4ca4e97e Add two patch to fix security bugs
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=118
2019-09-16 12:16:35 +00:00
Tomáš Chvátal
a94b87d806 Accepting request 725214 from home:jengelh:branches:Printing
- Update RPM groups.

OBS-URL: https://build.opensuse.org/request/show/725214
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=117
2019-09-09 07:14:34 +00:00
Dr. Werner Fink
83629d3344 Accepting request 724711 from home:WernerFink:branches:Printing
- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with ist wrapper script

- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with ist wrapper script

OBS-URL: https://build.opensuse.org/request/show/724711
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=115
2019-08-20 10:24:25 +00:00
Johannes Meixner
913dde5df3 Accepting request 701733 from home:jsegitz:branches:Printing
- Set AA profile to complain and added fixes for ps2epsi (boo#1134327)

OBS-URL: https://build.opensuse.org/request/show/701733
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=113
2019-05-09 08:39:39 +00:00
Johannes Meixner
555c9ea5b2 Accepting request 691555 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.27

OBS-URL: https://build.opensuse.org/request/show/691555
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=111
2019-04-04 14:27:19 +00:00
Johannes Meixner
2a57413541 Accepting request 686126 from home:jsegitz:ghostscript
- Added AA rules for dvips (bsc#1127934)
- Allow execution of dirname (bsc#1128697)
- Allow execution of hpijs (bsc#1128467). For now this is in 
  complain mode
- Sane profile name "ghostscript", moved profile from
  /etc/apparmor.d/usr.bin.gs to /etc/apparmor.d/ghostscript
  (bsc#1128607)
- Improved AA packaging (bsc#1128608)
  Thanks to Christian Boltz for his help

- Fix IJS printing problem (bsc#1128467)
  * added ijs_exec_server_dont_use_sh.patch
  * allow exec'ing hpijs in apparmor profile

- Added AA rules for dvips (bsc#1127934)
- Allow execution of dirname (bsc#1128697)
- Allow execution of hpijs (bsc#1128467). For now this is in 
  complain mode
- Sane profile name "ghostscript", moved profile from
  /etc/apparmor.d/usr.bin.gs to /etc/apparmor.d/ghostscript
  (bsc#1128607)
- Improved AA packaging (bsc#1128608)
  Thanks to Christian Boltz for his help

OBS-URL: https://build.opensuse.org/request/show/686126
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=109
2019-03-22 11:27:22 +00:00
Tomáš Chvátal
0dd7230d55 Accepting request 682767 from home:mwilck:branches:Printing
- Fix IJS printing problem (bsc#1128467)
  * added ijs_exec_server_dont_use_sh.patch
  * allow exec'ing hpijs in apparmor profile

OBS-URL: https://build.opensuse.org/request/show/682767
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=107
2019-03-08 12:28:32 +00:00
Johannes Meixner
3d3f520cee Aligned ghostscript-mini.changes with ghostscript.changes
regarding the added apparmor_usr.bin.gs.

OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=105
2019-02-14 09:26:43 +00:00
Johannes Meixner
cb3aac83a7 Accepting request 673382 from home:jsegitz:branches:Printing
- Added apparmor_usr.bin.gs. This profile prevents execution of 
  executables to serve as hardening for the binaries that process
  ghostscript. This is of limited use but prevents simple exploits.

OBS-URL: https://build.opensuse.org/request/show/673382
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=104
2019-02-12 10:26:47 +00:00
Johannes Meixner
ce1ba2ad82 Accepting request 668140 from home:jsmeix:branches:Printing
Ghostscript security fix upgrade (purely a security fix) to fix CVE-2019-6116 bsc#1122319

OBS-URL: https://build.opensuse.org/request/show/668140
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=102
2019-01-23 16:44:20 +00:00
Tomáš Chvátal
da972996b4 Accepting request 664448 from home:weberho:branches:Printing
- ghostscript-2.26-subclassing-devices-fix-put_image-method.patch
  fixes Ghostscript issue #700315 and bsc#1121490
  https://bugs.ghostscript.com/show_bug.cgi?id=700315
  Segfault in GS 9.26 with certain PDFs with -dLastPage=1

OBS-URL: https://build.opensuse.org/request/show/664448
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=101
2019-01-22 12:10:44 +00:00
Johannes Meixner
f0089d8f2b Accepting request 652826 from home:jsmeix:branches:Printing
Version upgrade to 9.26 (Purely security and a few bug fixes)

OBS-URL: https://build.opensuse.org/request/show/652826
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=99
2018-11-30 09:32:47 +00:00
Johannes Meixner
98164e5415 Accepting request 650710 from home:jsmeix:branches:Printing
Version upgrade to 9.26 (Purely security and a few bug fixes)

OBS-URL: https://build.opensuse.org/request/show/650710
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=98
2018-11-21 14:19:24 +00:00
Johannes Meixner
f82c4ed7e8 Accepting request 647580 from home:jsmeix:branches:Printing
Version upgrade to 9.26rc1 (Purely security and a few bug fixes)

OBS-URL: https://build.opensuse.org/request/show/647580
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=97
2018-11-09 12:40:49 +00:00
Johannes Meixner
07ebe5c7a1 Accepting request 635772 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.25 which provides fixes for regressions in Ghostscript 9.24 and more security bufgixes, see https://www.ghostscript.com/doc/9.25/News.htm

OBS-URL: https://build.opensuse.org/request/show/635772
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=95
2018-09-14 13:41:35 +00:00
Johannes Meixner
c0eb0b9d23 Accepting request 635540 from home:jsmeix:branches:Printing
ghostscript version upgrade to 9.25rc1 (first release candidate for 9.25) which provides in particular more security bufgixes, see https://ghostscript.com/pipermail/gs-devel/2018-September/010098.html

OBS-URL: https://build.opensuse.org/request/show/635540
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=94
2018-09-13 13:36:29 +00:00
Johannes Meixner
5ee9ca839d Accepting request 635499 from home:jsmeix:branches:Printing
ghostscript version upgrade to 9.24 which provides in particular security bufgixes, see https://www.ghostscript.com/doc/9.24/News.htm

OBS-URL: https://build.opensuse.org/request/show/635499
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=93
2018-09-13 09:30:13 +00:00
Johannes Meixner
1829075053 Accepting request 614286 from home:jsmeix:branches:Printing
CVE-2018-10194.patch fixes stack-based buffer overflow (bsc#1090099)

OBS-URL: https://build.opensuse.org/request/show/614286
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=91
2018-06-05 13:32:09 +00:00
Johannes Meixner
dc0a03b301 Accepting request 590295 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.23 (boo#1082896 and boo#1074266)

OBS-URL: https://build.opensuse.org/request/show/590295
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=89
2018-03-22 12:49:03 +00:00
Johannes Meixner
7fdc510d60 Accepting request 587895 from home:jsmeix:branches:Printing
Ghostscript 9.23rc1 uses lcms2 from SUSE and does no longer require any fonts packages (boo#1082896)

OBS-URL: https://build.opensuse.org/request/show/587895
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=88
2018-03-16 13:33:21 +00:00
Johannes Meixner
540378ba24 Accepting request 587502 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.23rc1 (first release candidate for 9.23)

OBS-URL: https://build.opensuse.org/request/show/587502
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=87
2018-03-15 12:57:22 +00:00
Johannes Meixner
9ce317b75a Accepting request 581052 from home:StefanBruens:branches:Printing
- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging

OBS-URL: https://build.opensuse.org/request/show/581052
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=86
2018-03-12 10:33:44 +00:00
Johannes Meixner
3fe572792f Accepting request 580811 from home:FunkyM:branches:Printing
- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Fuji Xerox and Dell
  Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets

OBS-URL: https://build.opensuse.org/request/show/580811
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=84
2018-02-28 10:35:32 +00:00
Johannes Meixner
d041b75502 Accepting request 546685 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.22 for openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15

OBS-URL: https://build.opensuse.org/request/show/546685
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=82
2017-11-30 10:44:29 +00:00
Johannes Meixner
ec293cdc8d Accepting request 526288 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.22rc1 (first release candidate for 9.22)

OBS-URL: https://build.opensuse.org/request/show/526288
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=81
2017-09-15 08:07:56 +00:00