pool/ghostscript
SHA256
3
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
150 Commits 2 Branches 0 Tags 210 MiB
ff483dd254
Commit Graph

150 Commits

This Branch
This Branch
All Branches
Author SHA256 Message Date
Dominique Leuenberger
ff483dd254 Accepting request 945779 from Printing 
Ghostscript security fix CVE-2021-45949 (bsc#1194304) including CVE-2021-45944 (bsc#1194303) (forwarded request 945778 from jsmeix)

OBS-URL: https://build.opensuse.org/request/show/945779
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ghostscript?expand=0&rev=53
 2022-01-14 22:12:43 +00:00
Johannes Meixner
064397ec60 Accepting request 945778 from home:jsmeix:branches:Printing 
Ghostscript security fix CVE-2021-45949 (bsc#1194304) including CVE-2021-45944 (bsc#1194303)

OBS-URL: https://build.opensuse.org/request/show/945778
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=148
 2022-01-12 09:39:16 +00:00
Dominique Leuenberger
7d395cc8de Accepting request 917942 from Printing 
Ghostscript security fix CVE-2021-3781 (bsc#1190381) (forwarded request 917941 from jsmeix)

OBS-URL: https://build.opensuse.org/request/show/917942
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ghostscript?expand=0&rev=52
 2021-09-13 14:24:27 +00:00
Johannes Meixner
5e8edce3ca Accepting request 917941 from home:jsmeix:branches:Printing 
Ghostscript security fix CVE-2021-3781 (bsc#1190381)

OBS-URL: https://build.opensuse.org/request/show/917941
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=147
 2021-09-10 11:35:00 +00:00
Dominique Leuenberger
2ce46ad6a6 Accepting request 895991 from Printing 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/895991
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ghostscript?expand=0&rev=51
 2021-06-01 08:33:40 +00:00
Johannes Meixner
e88f5efcbe Accepting request 894807 from home:jsmeix:branches:Printing 
Ghostscript version upgrade to 9.54.0

OBS-URL: https://build.opensuse.org/request/show/894807
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=145
 2021-05-21 12:57:31 +00:00
Dominique Leuenberger
9d71dde167 Accepting request 885580 from Printing 
OBS-URL: https://build.opensuse.org/request/show/885580
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ghostscript?expand=0&rev=50
 2021-04-18 19:44:42 +00:00
Johannes Meixner
15068e1197 Accepting request 885337 from home:wfrisch:branches:Printing 
Hardening: compile with PIC, link as PIE

OBS-URL: https://build.opensuse.org/request/show/885337
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=143
 2021-04-15 08:05:17 +00:00
Dominique Leuenberger
967d1b20b0 Accepting request 881824 from Printing 
OBS-URL: https://build.opensuse.org/request/show/881824
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ghostscript?expand=0&rev=49
 2021-04-14 08:10:12 +00:00
Johannes Meixner
a660ee5ba6 Accepting request 881509 from home:dimstar:Factory 
- Do not rely on apparmor at all for the -mini flavor:
  + Drop apparmor-abstraction and apparmor-rpm-macros
    BuildRequires.
  + Do not package apparmor files.

Shame on me - this should have been included in the previous submission already
Sure, apparmor is a great thing for security with ghostscript, but considering
the -mini flavor only ever exists inside OBS during package builds, we can
perfectly get away with this.

Users will only ever get 'ghostscript' - the full version.

OBS-URL: https://build.opensuse.org/request/show/881509
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=141
 2021-03-29 08:29:21 +00:00
Richard Brown
05bb74109c Accepting request 879172 from Printing 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/879172
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ghostscript?expand=0&rev=48
 2021-03-16 14:43:06 +00:00
Johannes Meixner
295bf60893 OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=139 2021-03-16 12:11:47 +00:00
Johannes Meixner
008b8cb457 OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=138 2021-03-16 12:10:33 +00:00
Johannes Meixner
44a55a5b9b OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=137 2021-03-16 12:10:05 +00:00
Johannes Meixner
8c4dc16072 Disabled 'Requires: this-is-only-for-build-envs' because this lets build of other packages fail in OBS projects where that stuff is not provided cf. https://build.opensuse.org/request/show/877992 
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=136
 2021-03-16 11:50:30 +00:00
Johannes Meixner
331fc679d0 Accepting request 877992 from home:dimstar:Factory 
- Do not require apparmor-abstractions: with the mini package being
  used only during build (and never on end user workstations),
  apparmor is not going to be anabled (build is in chroot/vm).
  Keeping the dep-chain of the -mini flavor as small as possible.
- Add extra safeguard Requires: this-is-only-for-build-envs: this
  symbol is not provided by any package outside of OBS, but OBS
  knows to ignore this dependency. This is just an additional
  safe-guard to stop users from installing this package, besides it
  not being part of the published distro repositories.

OBS-URL: https://build.opensuse.org/request/show/877992
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=135
 2021-03-16 11:26:35 +00:00
Johannes Meixner
a99fa23197 Comment in spec file that explains why "Provides: ghostscript_any" is there, cf. https://build.opensuse.org/request/show/877083 
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=134
 2021-03-08 10:36:51 +00:00
Johannes Meixner
d457c8966e Comment in spec file that explains why "Provides: ghostscript_any" is there, cf. https://build.opensuse.org/request/show/877083 
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=133
 2021-03-08 10:35:08 +00:00
Johannes Meixner
3914f34250 Accepting request 877083 from home:dimstar:Factory 
- Provide ghostscript_any by ghostscript-mini: this is a valid
  replacement for consumers.

OBS-URL: https://build.opensuse.org/request/show/877083
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=132
 2021-03-08 10:18:16 +00:00
Dominique Leuenberger
112ea62c59 Accepting request 843002 from Printing 
Ghostscript version upgrade to 9.53.3 that fixes boo#1177922 and fixes compilation with FreeType 2.10.3+ (forwarded request 843001 from jsmeix)

OBS-URL: https://build.opensuse.org/request/show/843002
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ghostscript?expand=0&rev=47
 2020-10-23 10:19:09 +00:00
Johannes Meixner
693fdde18f Accepting request 843001 from home:jsmeix:branches:Printing 
Ghostscript version upgrade to 9.53.3 that fixes boo#1177922 and fixes compilation with FreeType 2.10.3+

OBS-URL: https://build.opensuse.org/request/show/843001
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=130
 2020-10-20 15:14:31 +00:00
Dominique Leuenberger
f18722f7e4 Accepting request 823078 from Printing 
Ghostscript security fix CVE-2020-15900 (bsc#1174415) (forwarded request 823076 from jsmeix)

OBS-URL: https://build.opensuse.org/request/show/823078
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ghostscript?expand=0&rev=46
 2020-07-31 13:52:18 +00:00
Johannes Meixner
5e3250a567 Accepting request 823076 from home:jsmeix:branches:Printing 
Ghostscript security fix CVE-2020-15900 (bsc#1174415)

OBS-URL: https://build.opensuse.org/request/show/823076
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=128
 2020-07-28 08:03:20 +00:00
Dominique Leuenberger
7cdda786d1 Accepting request 800666 from Printing 
Ghostscript version upgrade to 9.52 which is primarily a general security upgrade that fixes in particular CVE-2020-12268 (bsc#1170603)

OBS-URL: https://build.opensuse.org/request/show/800666
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ghostscript?expand=0&rev=45
 2020-05-08 21:02:56 +00:00
Johannes Meixner
03d1d391b8 Accepting request 798866 from home:jsmeix:branches:Printing 
Ghostscript version upgrade to 9.52 which is primarily a general security upgrade that fixes in particular CVE-2020-12268 (bsc#1170603)

OBS-URL: https://build.opensuse.org/request/show/798866
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=126
 2020-04-29 10:44:01 +00:00
Dominique Leuenberger
59356870bf Accepting request 769481 from Printing 
OBS-URL: https://build.opensuse.org/request/show/769481
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ghostscript?expand=0&rev=44
 2020-02-06 12:06:57 +00:00
Martin Wilck
cb34c9d32b Accepting request 769173 from home:StefanBruens:branches:Printing 
- Use system openjpeg2 on Tumbleweed/Factory.

Also see https://build.opensuse.org/request/show/769172

OBS-URL: https://build.opensuse.org/request/show/769173
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=124
 2020-02-03 09:20:23 +00:00
Dominique Leuenberger
ba9a26036c Accepting request 732862 from Printing 
OBS-URL: https://build.opensuse.org/request/show/732862
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ghostscript?expand=0&rev=43
 2019-09-30 13:50:54 +00:00
Tomáš Chvátal
42553d6db8 Accepting request 732679 from home:jsegitz:branches:Printing 
- Made ghostscript profile enforcing and limit it to the ghostscript
  binaries (bsc#1150338)

OBS-URL: https://build.opensuse.org/request/show/732679
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=122
 2019-09-24 08:21:58 +00:00
Yuchen Lin
2bfcf642e0 Accepting request 731293 from Printing 
- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817

- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch to fix bsc#1140359
  for CVE-2019-12973

- Update RPM groups.

  use this with its wrapper script

- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394
- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817

- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch to fix bsc#1140359
  for CVE-2019-12973

- Update RPM groups.

  use this with its wrapper script 

- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible

OBS-URL: https://build.opensuse.org/request/show/731293
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ghostscript?expand=0&rev=42
 2019-09-20 12:48:11 +00:00
Dr. Werner Fink
9db5869058 Add overseen fix for CVE-2019-10216 
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=120
 2019-09-16 13:20:05 +00:00
Dr. Werner Fink
d137c48cfe Typo in ghostscript-mini.spec 
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=119
 2019-09-16 12:32:08 +00:00
Dr. Werner Fink
ac4ca4e97e Add two patch to fix security bugs 
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=118
 2019-09-16 12:16:35 +00:00
Tomáš Chvátal
a94b87d806 Accepting request 725214 from home:jengelh:branches:Printing 
- Update RPM groups.

OBS-URL: https://build.opensuse.org/request/show/725214
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=117
 2019-09-09 07:14:34 +00:00
Dominique Leuenberger
ab547c5c33 Accepting request 724779 from Printing 
- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with ist wrapper script

- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with ist wrapper script (forwarded request 724711 from WernerFink)

OBS-URL: https://build.opensuse.org/request/show/724779
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ghostscript?expand=0&rev=41
 2019-08-24 16:39:36 +00:00
Dr. Werner Fink
83629d3344 Accepting request 724711 from home:WernerFink:branches:Printing 
- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with ist wrapper script

- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with ist wrapper script

OBS-URL: https://build.opensuse.org/request/show/724711
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=115
 2019-08-20 10:24:25 +00:00
Dominique Leuenberger
6c621b5585 Accepting request 701738 from Printing 
- Set AA profile to complain and added fixes for ps2epsi (boo#1134327) (forwarded request 701733 from jsegitz)

OBS-URL: https://build.opensuse.org/request/show/701738
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ghostscript?expand=0&rev=40
 2019-05-14 11:28:57 +00:00
Johannes Meixner
913dde5df3 Accepting request 701733 from home:jsegitz:branches:Printing 
- Set AA profile to complain and added fixes for ps2epsi (boo#1134327)

OBS-URL: https://build.opensuse.org/request/show/701733
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=113
 2019-05-09 08:39:39 +00:00
Dominique Leuenberger
00991d98dd Accepting request 700982 from Printing 
Ghostscript version upgrade to 9.27 (bsc#1131863)

OBS-URL: https://build.opensuse.org/request/show/700982
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ghostscript?expand=0&rev=39
 2019-05-07 21:11:37 +00:00
Johannes Meixner
555c9ea5b2 Accepting request 691555 from home:jsmeix:branches:Printing 
Ghostscript version upgrade to 9.27

OBS-URL: https://build.opensuse.org/request/show/691555
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=111
 2019-04-04 14:27:19 +00:00
Dominique Leuenberger
aa21d60340 Accepting request 687694 from Printing 
Fixed AppArmor profile for Ghostscript plus required changes in Ghostscript to still run hpijs (bsc#1127934 bsc#1128697 bsc#1128467 bsc#1128607 bsc#1128608)

OBS-URL: https://build.opensuse.org/request/show/687694
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ghostscript?expand=0&rev=38
 2019-03-26 14:37:17 +00:00
Johannes Meixner
2a57413541 Accepting request 686126 from home:jsegitz:ghostscript 
- Added AA rules for dvips (bsc#1127934)
- Allow execution of dirname (bsc#1128697)
- Allow execution of hpijs (bsc#1128467). For now this is in 
  complain mode
- Sane profile name "ghostscript", moved profile from
  /etc/apparmor.d/usr.bin.gs to /etc/apparmor.d/ghostscript
  (bsc#1128607)
- Improved AA packaging (bsc#1128608)
  Thanks to Christian Boltz for his help

- Fix IJS printing problem (bsc#1128467)
  * added ijs_exec_server_dont_use_sh.patch
  * allow exec'ing hpijs in apparmor profile

- Added AA rules for dvips (bsc#1127934)
- Allow execution of dirname (bsc#1128697)
- Allow execution of hpijs (bsc#1128467). For now this is in 
  complain mode
- Sane profile name "ghostscript", moved profile from
  /etc/apparmor.d/usr.bin.gs to /etc/apparmor.d/ghostscript
  (bsc#1128607)
- Improved AA packaging (bsc#1128608)
  Thanks to Christian Boltz for his help

OBS-URL: https://build.opensuse.org/request/show/686126
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=109
 2019-03-22 11:27:22 +00:00
Dominique Leuenberger
5fd40ec1a1 Accepting request 682815 from Printing 
OBS-URL: https://build.opensuse.org/request/show/682815
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ghostscript?expand=0&rev=37
 2019-03-12 08:48:10 +00:00
Tomáš Chvátal
0dd7230d55 Accepting request 682767 from home:mwilck:branches:Printing 
- Fix IJS printing problem (bsc#1128467)
  * added ijs_exec_server_dont_use_sh.patch
  * allow exec'ing hpijs in apparmor profile

OBS-URL: https://build.opensuse.org/request/show/682767
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=107
 2019-03-08 12:28:32 +00:00
Stephan Kulow
1ae8a11879 Accepting request 679465 from Printing 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/679465
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ghostscript?expand=0&rev=36
 2019-03-01 19:25:28 +00:00
Johannes Meixner
3d3f520cee Aligned ghostscript-mini.changes with ghostscript.changes 
regarding the added apparmor_usr.bin.gs.

OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=105
 2019-02-14 09:26:43 +00:00
Johannes Meixner
cb3aac83a7 Accepting request 673382 from home:jsegitz:branches:Printing 
- Added apparmor_usr.bin.gs. This profile prevents execution of 
  executables to serve as hardening for the binaries that process
  ghostscript. This is of limited use but prevents simple exploits.

OBS-URL: https://build.opensuse.org/request/show/673382
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=104
 2019-02-12 10:26:47 +00:00
Dominique Leuenberger
2aa7b2e0ca Accepting request 668141 from Printing 
Ghostscript security fix upgrade (purely a security fix) to fix CVE-2019-6116 bsc#1122319 (forwarded request 668140 from jsmeix)

OBS-URL: https://build.opensuse.org/request/show/668141
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ghostscript?expand=0&rev=35
 2019-01-26 21:19:30 +00:00
Johannes Meixner
ce1ba2ad82 Accepting request 668140 from home:jsmeix:branches:Printing 
Ghostscript security fix upgrade (purely a security fix) to fix CVE-2019-6116 bsc#1122319

OBS-URL: https://build.opensuse.org/request/show/668140
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=102
 2019-01-23 16:44:20 +00:00
Tomáš Chvátal
da972996b4 Accepting request 664448 from home:weberho:branches:Printing 
- ghostscript-2.26-subclassing-devices-fix-put_image-method.patch
  fixes Ghostscript issue #700315 and bsc#1121490
  https://bugs.ghostscript.com/show_bug.cgi?id=700315
  Segfault in GS 9.26 with certain PDFs with -dLastPage=1

OBS-URL: https://build.opensuse.org/request/show/664448
OBS-URL: https://build.opensuse.org/package/show/Printing/ghostscript?expand=0&rev=101
 2019-01-22 12:10:44 +00:00