Commit Graph

105 Commits

Author SHA256 Message Date
Johannes Meixner
f7da6853e6 OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=151 2022-04-11 08:08:15 +00:00
Johannes Meixner
14d22cd53e OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=150 2022-04-11 08:06:37 +00:00
Johannes Meixner
38e2c0319c Accepting request 967447 from home:fcrozat:branches:Printing
- Do not requires apparmor-abstractions, it is not mandatory to
  use ghostscript.

OBS-URL: https://build.opensuse.org/request/show/967447
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=149
2022-04-08 09:30:18 +00:00
Johannes Meixner
064397ec60 Accepting request 945778 from home:jsmeix:branches:Printing
Ghostscript security fix CVE-2021-45949 (bsc#1194304) including CVE-2021-45944 (bsc#1194303)

OBS-URL: https://build.opensuse.org/request/show/945778
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=148
2022-01-12 09:39:16 +00:00
Johannes Meixner
5e8edce3ca Accepting request 917941 from home:jsmeix:branches:Printing
Ghostscript security fix CVE-2021-3781 (bsc#1190381)

OBS-URL: https://build.opensuse.org/request/show/917941
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=147
2021-09-10 11:35:00 +00:00
Johannes Meixner
e88f5efcbe Accepting request 894807 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.54.0

OBS-URL: https://build.opensuse.org/request/show/894807
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=145
2021-05-21 12:57:31 +00:00
Johannes Meixner
15068e1197 Accepting request 885337 from home:wfrisch:branches:Printing
Hardening: compile with PIC, link as PIE

OBS-URL: https://build.opensuse.org/request/show/885337
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=143
2021-04-15 08:05:17 +00:00
Johannes Meixner
a660ee5ba6 Accepting request 881509 from home:dimstar:Factory
- Do not rely on apparmor at all for the -mini flavor:
  + Drop apparmor-abstraction and apparmor-rpm-macros
    BuildRequires.
  + Do not package apparmor files.

Shame on me - this should have been included in the previous submission already
Sure, apparmor is a great thing for security with ghostscript, but considering
the -mini flavor only ever exists inside OBS during package builds, we can
perfectly get away with this.

Users will only ever get 'ghostscript' - the full version.

OBS-URL: https://build.opensuse.org/request/show/881509
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=141
2021-03-29 08:29:21 +00:00
Johannes Meixner
295bf60893 OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=139 2021-03-16 12:11:47 +00:00
Johannes Meixner
008b8cb457 OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=138 2021-03-16 12:10:33 +00:00
Johannes Meixner
44a55a5b9b OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=137 2021-03-16 12:10:05 +00:00
Johannes Meixner
8c4dc16072 Disabled 'Requires: this-is-only-for-build-envs' because this lets build of other packages fail in OBS projects where that stuff is not provided cf. https://build.opensuse.org/request/show/877992
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=136
2021-03-16 11:50:30 +00:00
Johannes Meixner
331fc679d0 Accepting request 877992 from home:dimstar:Factory
- Do not require apparmor-abstractions: with the mini package being
  used only during build (and never on end user workstations),
  apparmor is not going to be anabled (build is in chroot/vm).
  Keeping the dep-chain of the -mini flavor as small as possible.
- Add extra safeguard Requires: this-is-only-for-build-envs: this
  symbol is not provided by any package outside of OBS, but OBS
  knows to ignore this dependency. This is just an additional
  safe-guard to stop users from installing this package, besides it
  not being part of the published distro repositories.

OBS-URL: https://build.opensuse.org/request/show/877992
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=135
2021-03-16 11:26:35 +00:00
Johannes Meixner
a99fa23197 Comment in spec file that explains why "Provides: ghostscript_any" is there, cf. https://build.opensuse.org/request/show/877083
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=134
2021-03-08 10:36:51 +00:00
Johannes Meixner
d457c8966e Comment in spec file that explains why "Provides: ghostscript_any" is there, cf. https://build.opensuse.org/request/show/877083
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=133
2021-03-08 10:35:08 +00:00
Johannes Meixner
3914f34250 Accepting request 877083 from home:dimstar:Factory
- Provide ghostscript_any by ghostscript-mini: this is a valid
  replacement for consumers.

OBS-URL: https://build.opensuse.org/request/show/877083
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=132
2021-03-08 10:18:16 +00:00
Johannes Meixner
693fdde18f Accepting request 843001 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.53.3 that fixes boo#1177922 and fixes compilation with FreeType 2.10.3+

OBS-URL: https://build.opensuse.org/request/show/843001
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=130
2020-10-20 15:14:31 +00:00
Johannes Meixner
5e3250a567 Accepting request 823076 from home:jsmeix:branches:Printing
Ghostscript security fix CVE-2020-15900 (bsc#1174415)

OBS-URL: https://build.opensuse.org/request/show/823076
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=128
2020-07-28 08:03:20 +00:00
Johannes Meixner
03d1d391b8 Accepting request 798866 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.52 which is primarily a general security upgrade that fixes in particular CVE-2020-12268 (bsc#1170603)

OBS-URL: https://build.opensuse.org/request/show/798866
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=126
2020-04-29 10:44:01 +00:00
Martin Wilck
cb34c9d32b Accepting request 769173 from home:StefanBruens:branches:Printing
- Use system openjpeg2 on Tumbleweed/Factory.

Also see https://build.opensuse.org/request/show/769172

OBS-URL: https://build.opensuse.org/request/show/769173
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=124
2020-02-03 09:20:23 +00:00
Tomáš Chvátal
42553d6db8 Accepting request 732679 from home:jsegitz:branches:Printing
- Made ghostscript profile enforcing and limit it to the ghostscript
  binaries (bsc#1150338)

OBS-URL: https://build.opensuse.org/request/show/732679
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=122
2019-09-24 08:21:58 +00:00
Dr. Werner Fink
9db5869058 Add overseen fix for CVE-2019-10216
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=120
2019-09-16 13:20:05 +00:00
Dr. Werner Fink
d137c48cfe Typo in ghostscript-mini.spec
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=119
2019-09-16 12:32:08 +00:00
Dr. Werner Fink
ac4ca4e97e Add two patch to fix security bugs
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=118
2019-09-16 12:16:35 +00:00
Tomáš Chvátal
a94b87d806 Accepting request 725214 from home:jengelh:branches:Printing
- Update RPM groups.

OBS-URL: https://build.opensuse.org/request/show/725214
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=117
2019-09-09 07:14:34 +00:00
Dr. Werner Fink
83629d3344 Accepting request 724711 from home:WernerFink:branches:Printing
- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with ist wrapper script

- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with ist wrapper script

OBS-URL: https://build.opensuse.org/request/show/724711
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=115
2019-08-20 10:24:25 +00:00
Johannes Meixner
913dde5df3 Accepting request 701733 from home:jsegitz:branches:Printing
- Set AA profile to complain and added fixes for ps2epsi (boo#1134327)

OBS-URL: https://build.opensuse.org/request/show/701733
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=113
2019-05-09 08:39:39 +00:00
Johannes Meixner
555c9ea5b2 Accepting request 691555 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.27

OBS-URL: https://build.opensuse.org/request/show/691555
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=111
2019-04-04 14:27:19 +00:00
Johannes Meixner
2a57413541 Accepting request 686126 from home:jsegitz:ghostscript
- Added AA rules for dvips (bsc#1127934)
- Allow execution of dirname (bsc#1128697)
- Allow execution of hpijs (bsc#1128467). For now this is in 
  complain mode
- Sane profile name "ghostscript", moved profile from
  /etc/apparmor.d/usr.bin.gs to /etc/apparmor.d/ghostscript
  (bsc#1128607)
- Improved AA packaging (bsc#1128608)
  Thanks to Christian Boltz for his help

- Fix IJS printing problem (bsc#1128467)
  * added ijs_exec_server_dont_use_sh.patch
  * allow exec'ing hpijs in apparmor profile

- Added AA rules for dvips (bsc#1127934)
- Allow execution of dirname (bsc#1128697)
- Allow execution of hpijs (bsc#1128467). For now this is in 
  complain mode
- Sane profile name "ghostscript", moved profile from
  /etc/apparmor.d/usr.bin.gs to /etc/apparmor.d/ghostscript
  (bsc#1128607)
- Improved AA packaging (bsc#1128608)
  Thanks to Christian Boltz for his help

OBS-URL: https://build.opensuse.org/request/show/686126
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=109
2019-03-22 11:27:22 +00:00
Tomáš Chvátal
0dd7230d55 Accepting request 682767 from home:mwilck:branches:Printing
- Fix IJS printing problem (bsc#1128467)
  * added ijs_exec_server_dont_use_sh.patch
  * allow exec'ing hpijs in apparmor profile

OBS-URL: https://build.opensuse.org/request/show/682767
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=107
2019-03-08 12:28:32 +00:00
Johannes Meixner
3d3f520cee Aligned ghostscript-mini.changes with ghostscript.changes
regarding the added apparmor_usr.bin.gs.

OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=105
2019-02-14 09:26:43 +00:00
Johannes Meixner
cb3aac83a7 Accepting request 673382 from home:jsegitz:branches:Printing
- Added apparmor_usr.bin.gs. This profile prevents execution of 
  executables to serve as hardening for the binaries that process
  ghostscript. This is of limited use but prevents simple exploits.

OBS-URL: https://build.opensuse.org/request/show/673382
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=104
2019-02-12 10:26:47 +00:00
Johannes Meixner
ce1ba2ad82 Accepting request 668140 from home:jsmeix:branches:Printing
Ghostscript security fix upgrade (purely a security fix) to fix CVE-2019-6116 bsc#1122319

OBS-URL: https://build.opensuse.org/request/show/668140
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=102
2019-01-23 16:44:20 +00:00
Tomáš Chvátal
da972996b4 Accepting request 664448 from home:weberho:branches:Printing
- ghostscript-2.26-subclassing-devices-fix-put_image-method.patch
  fixes Ghostscript issue #700315 and bsc#1121490
  https://bugs.ghostscript.com/show_bug.cgi?id=700315
  Segfault in GS 9.26 with certain PDFs with -dLastPage=1

OBS-URL: https://build.opensuse.org/request/show/664448
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=101
2019-01-22 12:10:44 +00:00
Johannes Meixner
f0089d8f2b Accepting request 652826 from home:jsmeix:branches:Printing
Version upgrade to 9.26 (Purely security and a few bug fixes)

OBS-URL: https://build.opensuse.org/request/show/652826
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=99
2018-11-30 09:32:47 +00:00
Johannes Meixner
98164e5415 Accepting request 650710 from home:jsmeix:branches:Printing
Version upgrade to 9.26 (Purely security and a few bug fixes)

OBS-URL: https://build.opensuse.org/request/show/650710
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=98
2018-11-21 14:19:24 +00:00
Johannes Meixner
f82c4ed7e8 Accepting request 647580 from home:jsmeix:branches:Printing
Version upgrade to 9.26rc1 (Purely security and a few bug fixes)

OBS-URL: https://build.opensuse.org/request/show/647580
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=97
2018-11-09 12:40:49 +00:00
Johannes Meixner
07ebe5c7a1 Accepting request 635772 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.25 which provides fixes for regressions in Ghostscript 9.24 and more security bufgixes, see https://www.ghostscript.com/doc/9.25/News.htm

OBS-URL: https://build.opensuse.org/request/show/635772
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=95
2018-09-14 13:41:35 +00:00
Johannes Meixner
c0eb0b9d23 Accepting request 635540 from home:jsmeix:branches:Printing
ghostscript version upgrade to 9.25rc1 (first release candidate for 9.25) which provides in particular more security bufgixes, see https://ghostscript.com/pipermail/gs-devel/2018-September/010098.html

OBS-URL: https://build.opensuse.org/request/show/635540
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=94
2018-09-13 13:36:29 +00:00
Johannes Meixner
5ee9ca839d Accepting request 635499 from home:jsmeix:branches:Printing
ghostscript version upgrade to 9.24 which provides in particular security bufgixes, see https://www.ghostscript.com/doc/9.24/News.htm

OBS-URL: https://build.opensuse.org/request/show/635499
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=93
2018-09-13 09:30:13 +00:00
Johannes Meixner
1829075053 Accepting request 614286 from home:jsmeix:branches:Printing
CVE-2018-10194.patch fixes stack-based buffer overflow (bsc#1090099)

OBS-URL: https://build.opensuse.org/request/show/614286
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=91
2018-06-05 13:32:09 +00:00
Johannes Meixner
dc0a03b301 Accepting request 590295 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.23 (boo#1082896 and boo#1074266)

OBS-URL: https://build.opensuse.org/request/show/590295
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=89
2018-03-22 12:49:03 +00:00
Johannes Meixner
7fdc510d60 Accepting request 587895 from home:jsmeix:branches:Printing
Ghostscript 9.23rc1 uses lcms2 from SUSE and does no longer require any fonts packages (boo#1082896)

OBS-URL: https://build.opensuse.org/request/show/587895
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=88
2018-03-16 13:33:21 +00:00
Johannes Meixner
540378ba24 Accepting request 587502 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.23rc1 (first release candidate for 9.23)

OBS-URL: https://build.opensuse.org/request/show/587502
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=87
2018-03-15 12:57:22 +00:00
Johannes Meixner
9ce317b75a Accepting request 581052 from home:StefanBruens:branches:Printing
- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging

OBS-URL: https://build.opensuse.org/request/show/581052
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=86
2018-03-12 10:33:44 +00:00
Johannes Meixner
3fe572792f Accepting request 580811 from home:FunkyM:branches:Printing
- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Fuji Xerox and Dell
  Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets

OBS-URL: https://build.opensuse.org/request/show/580811
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=84
2018-02-28 10:35:32 +00:00
Johannes Meixner
d041b75502 Accepting request 546685 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.22 for openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15

OBS-URL: https://build.opensuse.org/request/show/546685
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=82
2017-11-30 10:44:29 +00:00
Johannes Meixner
ec293cdc8d Accepting request 526288 from home:jsmeix:branches:Printing
Ghostscript version upgrade to 9.22rc1 (first release candidate for 9.22)

OBS-URL: https://build.opensuse.org/request/show/526288
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=81
2017-09-15 08:07:56 +00:00
Johannes Meixner
404156ec6d Accepting request 501324 from home:dmolkentin:branches:Printing
- CVE-2017-7207.patch fixes a NULL pointer dereference in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)

OBS-URL: https://build.opensuse.org/request/show/501324
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=79
2017-06-06 09:08:41 +00:00
Johannes Meixner
30603cab46 Accepting request 492484 from home:jsmeix:branches:Printing
CVE-2017-8291.patch fixes a type confusion in .rsdparams and .eqproc see https://bugs.ghostscript.com/show_bug.cgi?id=697808 and https://bugs.ghostscript.com/show_bug.cgi?id=697799 (bsc#1036453)

OBS-URL: https://build.opensuse.org/request/show/492484
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=77
2017-05-02 13:11:51 +00:00