* Patch release to address some security bugs
* This release (10.02.0) marks the final demise of the
PostScript based PDF interpreter.
* This 10.01.1 release removes the "-dNEWPDF=false" command
line option to fall back to the deprecated, old PDF
interpreter.
* This 10.01.0 release removes the "-dNEWPDF=false" command
line option to fall back to the deprecated, old PDF
interpreter.
* This release officially deprecates the old Postscript
implementation of PDF, we will not be updating or maintaining
that code moving forward. The option to use the old PDF
implementation _**will**_ be removed in the next full release
(10.01.0)
* Important: This release includes the new PDF interpreter
(implemented in C rather than PostScript). It is both
integrated into Ghostscript (now ENABLED by default), and
available as a standalone, PDF only, binary. See
https://ghostscript.com/pdfi.html for more details.
* This also bundles the latest zlib (1.2.12) which addresses a
security issue (CVE-2018-25032)
* **Important**: This release includes the new PDF interpreter
(implemented in C rather than PostScript). It is both
integrated into Ghostscript (now **ENABLED** by default), and
available as a standalone, PDF only, binary. See
https://ghostscript.com/pdfi.html for more details.
- drop CVE-2023-28879.patch, CVE-2023-36664.patch,
CVE-2023-38559.patch, CVE-2023-43115.patch,
CVE-2023-46751.patch: upstream
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=171
- update to 9.56.1:
* New PDF Interpreter: This is an entirely new implementation written in C
(rather than PostScript, as before)
* Calling Ghostscript via the GS API is now thread safe. The one limitation
is that the X11 devices for Unix-like systems (x11, x11alpha, x11cmyk,
x11cmyk2, x11cmyk4, x11cmyk8, x11gray2, x11gray4 and x11mono) cannot be
made thread safe, due to their interaction with the X11 server, those
devices have been modified to only allow one instance in an executable.
* The PSD output device now writes ICC profiles to their output files, for
improved color fidelity.
* Our efforts in code hygiene and maintainability continue.
* The usual round of bug fixes, compatibility changes, and incremental
improvements.
* We have added the capability to build with the Tesseract OCR
engine. In such a build, new devices are available (pdfocr8/pdfocr24/
pdfocr32) which render the output file to an image, OCR that image, and
output the image "wrapped" up as a PDF file, with the OCR generated text
information included as "invisible" text (in PDF terms, text rendering mode
3).
- drop CVE-2021-3781.patch, CVE-2021-45949.patch: upstream
- use _multibuild
OBS-URL: https://build.opensuse.org/request/show/989807
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=155
- Do not rely on apparmor at all for the -mini flavor:
+ Drop apparmor-abstraction and apparmor-rpm-macros
BuildRequires.
+ Do not package apparmor files.
Shame on me - this should have been included in the previous submission already
Sure, apparmor is a great thing for security with ghostscript, but considering
the -mini flavor only ever exists inside OBS during package builds, we can
perfectly get away with this.
Users will only ever get 'ghostscript' - the full version.
OBS-URL: https://build.opensuse.org/request/show/881509
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=141
- Do not require apparmor-abstractions: with the mini package being
used only during build (and never on end user workstations),
apparmor is not going to be anabled (build is in chroot/vm).
Keeping the dep-chain of the -mini flavor as small as possible.
- Add extra safeguard Requires: this-is-only-for-build-envs: this
symbol is not provided by any package outside of OBS, but OBS
knows to ignore this dependency. This is just an additional
safe-guard to stop users from installing this package, besides it
not being part of the published distro repositories.
OBS-URL: https://build.opensuse.org/request/show/877992
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=135
- Added AA rules for dvips (bsc#1127934)
- Allow execution of dirname (bsc#1128697)
- Allow execution of hpijs (bsc#1128467). For now this is in
complain mode
- Sane profile name "ghostscript", moved profile from
/etc/apparmor.d/usr.bin.gs to /etc/apparmor.d/ghostscript
(bsc#1128607)
- Improved AA packaging (bsc#1128608)
Thanks to Christian Boltz for his help
- Fix IJS printing problem (bsc#1128467)
* added ijs_exec_server_dont_use_sh.patch
* allow exec'ing hpijs in apparmor profile
- Added AA rules for dvips (bsc#1127934)
- Allow execution of dirname (bsc#1128697)
- Allow execution of hpijs (bsc#1128467). For now this is in
complain mode
- Sane profile name "ghostscript", moved profile from
/etc/apparmor.d/usr.bin.gs to /etc/apparmor.d/ghostscript
(bsc#1128607)
- Improved AA packaging (bsc#1128608)
Thanks to Christian Boltz for his help
OBS-URL: https://build.opensuse.org/request/show/686126
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=109
