------------------------------------------------------------------- Mon Oct 17 13:36:57 CEST 2016 - jsmeix@suse.de - CVE-2013-5653 (getenv and filenameforall ignore -dSAFER) is fixed in the Ghostscript 9.20 upstream sources see http://bugs.ghostscript.com/show_bug.cgi?id=694724 (bsc#1001951). - CVE-2016-7976.patch fixes that various userparams allow %pipe% in paths, allowing remote shell command execution see http://bugs.ghostscript.com/show_bug.cgi?id=697178 (bsc#1001951). - CVE-2016-7977.patch fixes that .libfile doesn't check PermitFileReading array, allowing remote file disclosure see http://bugs.ghostscript.com/show_bug.cgi?id=697169 (bsc#1001951). - CVE-2016-7978.patch fixes that reference leak in .setdevice allows use-after-free and remote code execution see http://bugs.ghostscript.com/show_bug.cgi?id=697179 (bsc#1001951). - CVE-2016-7979.patch fixes that type confusion in .initialize_dsc_parser allows remote code execution see http://bugs.ghostscript.com/show_bug.cgi?id=697190 (bsc#1001951). - CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5 see http://bugs.ghostscript.com/show_bug.cgi?id=697203 (bsc#1004237). ------------------------------------------------------------------- Thu Sep 29 14:40:38 CEST 2016 - jsmeix@suse.de - Version upgrade to 9.20. Purely a maintenance release. For details see the News.htm and History9.htm files. Highlights in this release include: * The usual round of bug fixes, compatibility changes, and incremental improvements. Incompatible changes: * The planned device API tidy did not happen for this release, due to time pressures, but we still intend to undertake the following: We plan to somewhat tidy up the device API. We intend to remove deprecated device procs (methods/function pointers) and change the device API so every device proc takes a graphics state parameter (rather than the current scheme where only a very few procs take an imager state parameter). This should serve as notice to anyone maintaining a Ghostscript device outside the canonical source tree that you may (probably will) need to update your device(s) when these changes happen. Devices using only the non-deprecated procs should be trivial to update. ------------------------------------------------------------------- Thu Sep 15 10:12:03 CEST 2016 - jsmeix@suse.de - Version upgrade to 9.20rc1 (first release candidate for 9.20). For details see the News.htm and History9.htm files. Regarding installing packages (in particular release candidates) from the openSUSE build service development project "Printing" see https://build.opensuse.org/project/show/Printing ------------------------------------------------------------------- Wed Mar 23 15:43:27 CET 2016 - jsmeix@suse.de - Version upgrade to 9.19. Mainly a maintenance release. For details see the News.htm and History9.htm files. Highlights in this release include: * Metadata pdfmark is now implemented. This allows the user to specify an XMP stream which will be written to the Catalog of the PDF file. A new pdfmark 'Ext_Metadata' has been defined. This takes a string parameter which contains XML to be add to the XMP normally created by pdfwrite. See "pdfwrite pdfmark extensions" for more information. * An experimental, rudimentary raster trapping implementation has been added to the Ghostscript graphics library. See "Trapping" for details. Incompatible changes: * (Minor) API change: copy_alpha now supports 8 bit depth (as well as the previous 2 and 4). * The gs man pages are woefully out of date and basically unmaintained. With the release following 9.19, we intend to replace their contents with a very limited summary of (unlikely to ever change aspects of) calling Ghostscript, and a pointer to the (maintained) HTML documentation. That is, unless a volunteer is willing to update, and commit to maintaining the man pages. * ijs-config is no longer provided Planned incompatible changes: * We plan (ideally for the release following 9.19) to somewhat tidy up the device API. We plan to remove deprecated device procs (methods/function pointers). We also intend to merge the imager state and graphics state (thus eliminating the imager state), and change the device API so every device proc takes a graphics state parameter (rather than the current scheme where only a very few procs take an imager state parameter). This should serve as notice to anyone maintaining a Ghostscript device outside the canonical source tree that you may (probably will) need to update your device(s) when these changes happen. Devices using only the non-deprecated procs should be trivial to update. - fix_make_install.patch fixes and add_brackets_for_old_autoconf.patch are no longer needed because both issues are fixed in the upstream sources. ------------------------------------------------------------------- Fri Mar 18 10:13:23 CET 2016 - jsmeix@suse.de - Version upgrade to 9.19rc1 (first release candidate for 9.19). For details see the News.htm and History9.htm files. Regarding installing packages (in particular release candidates) from the openSUSE build service development project "Printing" see https://build.opensuse.org/project/show/Printing - ijs-config is no longer provided - fix_make_install.patch fixes an install error and add_brackets_for_old_autoconf.patch fixes an autoconf error see http://bugs.ghostscript.com/show_bug.cgi?id=696665 - fix_ijs_and_x11_for_FirstPage_and_LastPage.patch is no longer needed because it is fixed in the upstream sources. - install_gserrors.h.patch is no longer needed because it is fixed in the upstream sources. ------------------------------------------------------------------- Wed Nov 18 11:46:58 UTC 2015 - schwab@suse.de - Do not use library sources for freetype jpeg libpng tiff zlib from the Ghostscript upstream tarball because we prefer to use for long-established standard libraries the ones from SUSE in particular to automatically get SUSE security updates for standard libraries. In contrast we use e.g. lcms2 from the Ghostscript upstream tarball because this one is specially modified to work with Ghostscript so that we cannot use lcms2 from SUSE. - remove-zlib-h-dependency.patch removes dependency on zlib/zlib.h in makefiles as we do not use the zlib sources from the Ghostscript upstream tarball. ------------------------------------------------------------------- Thu Nov 5 13:33:14 CET 2015 - jsmeix@suse.de - An incompatible change appeared when building other software with Ghostscript 9.18. Since version 9.18 Ghostscript does no longer provide e_ (e.g. e_NeedInput) in its header files (gserrors.h and ierrors.h). When building other software with Ghostscript 9.18 gs_error_ (e.g. gs_error_NeedInput) must be used, see boo#953149 and http://bugs.ghostscript.com/show_bug.cgi?id=696317 ------------------------------------------------------------------- Fri Oct 30 11:28:14 CET 2015 - jsmeix@suse.de - install_gserrors.h.patch installs gserrors.h to fix http://bugs.ghostscript.com/show_bug.cgi?id=696301 because without gserrors.h several other packages fail to build (in particular texlive, libspectre, gimp,...). ------------------------------------------------------------------- Mon Oct 12 10:26:52 CEST 2015 - jsmeix@suse.de - fix_ijs_and_x11_for_FirstPage_and_LastPage.patch fixes the Ghostscript device ijs and the x11* devices so that they also work when -dFirstPage/-dLastPage is used, see http://bugs.ghostscript.com/show_bug.cgi?id=696246 ------------------------------------------------------------------- Tue Oct 6 10:21:22 CEST 2015 - jsmeix@suse.de - Version upgrade to 9.18. A maintenance release. There are no recorded incompatible changes (as of this writing). Highlights in this release include: * A substantial revision of the build system and GhostPDL directory structure. Ghostscript-only users should not be affected by this change. * A new method of internally inserting devices into the device chain has been developed, named "device subclassing". This allows suitably written devices to be more easily and consistently as "filter" devices. The first fruit of this is a new implementation of the "-dFirstPage"/"-dLastPage" feature which functions a device filter in the Ghostscript graphics library, meaning it works consistently with all input languages. * Plus the usual round of bug fixes, compatibility changes, and incremental improvements. See http://www.ghostscript.com/doc/9.18/News.htm For details see the News.htm and History9.htm files. ------------------------------------------------------------------- Tue Sep 29 11:05:48 CEST 2015 - jsmeix@suse.de - Version upgrade to 9.18rc2 (second release candidate for 9.18). For details see the News.htm and History9.htm files. Regarding installing packages (in particular release candidates) from the openSUSE build service development project "Printing" see https://build.opensuse.org/project/show/Printing - assign_pointer_not_value_in_gximono.c.patch is no longer needed because it is fixed in the upstream sources. ------------------------------------------------------------------- Thu Sep 24 10:29:04 CEST 2015 - jsmeix@suse.de - Version upgrade to 9.18rc1 (first release candidate for 9.18). For details see the News.htm and History9.htm files. Regarding installing packages (in particular release candidates) from the openSUSE build service development project "Printing" see https://build.opensuse.org/project/show/Printing - CVE-2015-3228.patch is no longer needed because it is fixed in the upstream sources. - assign_pointer_not_value_in_gximono.c.patch attempts to fix a "assignment makes pointer from integer without a cast" compiler warning by assigning the pointer and not the integer value. - Removed --disable-compile-inits from configure, see http://bugs.ghostscript.com/show_bug.cgi?id=696223 and "Precompiled run-time data" in /usr/share/ghostscript/9.18/doc/Make.htm ------------------------------------------------------------------- Wed Jul 29 15:20:46 CEST 2015 - jsmeix@suse.de - CVE-2015-3228.patch fixes out of bound read/write cause by integer overflow in gsmalloc.c (boo#939342). ------------------------------------------------------------------- Tue Mar 31 10:18:06 CEST 2015 - jsmeix@suse.de - Version upgrade to 9.16. Primarily a maintenance release. There are no recorded incompatible changes (as of this writing). Highlights in this release include: * "LockColorants" command line option for tiffsep and psdcmyk devices. * Improved high level devices handling of Forms. See http://www.ghostscript.com/doc/9.16/News.htm For details see the News.htm and History9.htm files. - fix.including.pread.pwrite.pthread_mutexattr_settype.diff is no longer needed because it is fixed in the upstream sources. ------------------------------------------------------------------- Wed Mar 25 12:38:16 CET 2015 - jsmeix@suse.de - fix.including.pread.pwrite.pthread_mutexattr_settype.diff fixes on SLE11 implicit declaration of function warnings for 'pread' 'pwrite' 'pthread_mutexattr_settype' see http://bugs.ghostscript.com/show_bug.cgi?id=695882 - ppc64le-support.patch is a remainder of the previous patch now the hunk for LCMS (lcms/include/lcms.h) is removed because LCMS 1.x is removed since Ghostscript 9.16 but the hunk for LCMS2 (lcms2/include/lcms2.h) is still needed see http://bugs.ghostscript.com/show_bug.cgi?id=695544 ------------------------------------------------------------------- Fri Mar 20 17:12:34 CET 2015 - jsmeix@suse.de - Version upgrade to 9.16rc2 (second release candidate for 9.16). For details see the News.htm and History9.htm files. Regarding installing packages (in particular release candidates) from the openSUSE build service development project "Printing" see https://build.opensuse.org/project/show/Printing ------------------------------------------------------------------- Sun Sep 28 18:00:37 CEST 2014 - ro@suse.de - readd ppc64le patch ppc64le-support.patch (adapted for lcms2 in Ghostscript version 9.15): the tests in lcms2.h cannot work without "include " that is now added and regardless that lcms is not used by default (unless the configure option --with-lcms is set), lcms is again fixed (see http://bugs.ghostscript.com/show_bug.cgi?id=695544). ------------------------------------------------------------------- Tue Sep 23 10:14:28 CEST 2014 - jsmeix@suse.de - Version upgrade to 9.15. Primarily a maintenance release. There are no recorded incompatible changes (as of this writing). Highlights in this release include: * Ghostscript now supports the PDF security handler revision 6. * The pdfwrite and ps2write (and related) devices can now be forced to "flatten" glyphs into "basic" marking operations (rather than writing fonts to the output), by giving the -dNoOutputFonts command line option (defaults to "false"). * PostScript programs can now use get_params or get_param to determine if a page contains color markings by reading the pageneutralcolor state from the device (so whether the page is "color" or "mono"). Note that this is only accurate when in clist mode, so -dMaxBitmap=0 and -dGrayDetection=true should both be used. * The pdfwrite device now supports Link annotations with GoTo and GoToR actions. * The pdfwrite device now supports BMC/BDC/EMC pdfmarks * Regarding the new color management for the pdfwrite device introduced in the previous release, the proscription on using the new color management when producing PDF/A-1 compliant files is now lifted. To reiterate, also, with the new color management implementation, using the UseCIEColor option is strongly discouraged. For further information on the new pdfwrite color management, see in Ps2pdf.htm the "Color Conversion and Management" section. * Plus the usual round of bug fixes, compatibility changes, and incremental improvements. For details see the News.htm and History9.htm files. ------------------------------------------------------------------- Wed Sep 17 12:17:47 CEST 2014 - jsmeix@suse.de - Version upgrade to 9.15rc2 (second release candidate for 9.15). Ghostscript upstream QA highlighted a couple of issues that they felt warranted a fresh release candidate. For details see the History9.htm file. ------------------------------------------------------------------- Tue Sep 9 16:06:31 CEST 2014 - jsmeix@suse.de - Version upgrade to 9.15rc1 (first release candidate for 9.15). For details see the News.htm and History9.htm files. - ppc64le-support.patch is no longer needed because it is fixed in the upstream sources. - Removed trailing whitespaces in spec file and changes file. ------------------------------------------------------------------- Thu Mar 27 12:21:55 CET 2014 - jsmeix@suse.de - Version upgrade to 9.14. Primarily a maintenance release. Highlights in this release include (excerpt): * pdfwrite now uses the same color management engine as Ghostscript rendering devices (by default LCMS2). For the duration of this release a new switch -dPDFUseOldCMS is available which will restore the old color management. See: "Color Conversion and Management" in Ps2pdf.htm Due to constraints of the PDF/A-1 specification, the new color management does not yet apply when producing PDF/A files. * A new device 'eps2write' has been added which allows for the creation of EPS files using the ps2write device instead of the deprecated and removed pswrite device. The epswrite device is now also deprecated and will be removed in a future release. * Ghostscript has a new "pwgraster" output device for PWG Raster output. * The CUPS device now has improved support for PPD-less printing. For details see the News.htm and History9.htm files. ------------------------------------------------------------------- Fri Dec 13 19:09:12 UTC 2013 - uweigand@de.ibm.com - ppc64le-support.patch from IBM fixes endianness in lcms (the Little-CMS library) to support the new architecture ppc64le (IBM Power PC Little Endian architecture) because ppc64 is big-endian and ppc64le is little-endian and lcms has a hard-coded check that assumes PowerPC is always big-endian which is incorrect on ppc64le. The fix is already in the main Little-CMS repository by this Git commit https://github.com/mm2/Little-CMS/commit/b4f5c91a2c1582bd284f0d0f49cb43e2c2235a79 (There are some cosmetic changes in the upstream patch.) It is not yet in the imported copy in Ghostscript. IBM will work with upstream to get the fix imported too. ------------------------------------------------------------------- Tue Sep 3 16:26:46 CEST 2013 - jsmeix@suse.de - Version upgrade to 9.10. Primarily a maintenance release. Highlights in this release include: * LittleCMS2 and libpng have both been updated to the latest versions. * The URW Postscript font set has been updated to the latest version, fixing many compatibility problems with the Adobe fonts. * The CUPS filters gstoraster and gstopxl have been removed from Ghostscript. Those filters are now provided by cups-filters (a free software package hosted by OpenPrinting) that contains all CUPS filters needed by CUPS under Linux (see also the openSUSE issue bnc#735404 comment#44 at https://bugzilla.novell.com/show_bug.cgi?id=735404#c44). For details see the News.htm and History9.htm files. - fix-undefined-operation.patch is no longer needed because it is fixed in the upstream sources. ------------------------------------------------------------------- Thu Aug 29 15:06:13 CEST 2013 - jsmeix@suse.de - Version upgrade to 9.10rc1 (release candidate for the 9.10 version). For details see the News.htm and History9.htm files. - Prepare spec files to build both releases and release candidates easily in the future by using special different version strings. - fix-undefined-operation.patch fixes http://bugs.ghostscript.com/show_bug.cgi?id=694546 - Removed BuildRequires for liblcms-devel because it is not needed when we build Ghostscript that works in compliance with upstream (see https://bugzilla.novell.com/show_bug.cgi?id=828751#c5). ------------------------------------------------------------------- Wed Mar 27 07:58:08 UTC 2013 - mmeister@suse.com - Added url as source. Please see http://en.opensuse.org/SourceUrls ------------------------------------------------------------------- Tue Feb 19 13:51:06 CET 2013 - jsmeix@suse.de - Version upgrade to 9.07. * As of this release (9.07), Ghostscript is distributed under the GNU Affero General Public License (AGPL). * Ghostscript has been extended to support file sizes >4Gb in particular reading and writing PDF files. * Color management enhancements. Full details of the color management features can be found in: GS9_Color_Management.pdf * The pdfwrite devices now supports linearized (or optimized for fast web view) output directly ("-dFastWebView"). * With the addition of linearisation to pdfwrite, pdfopt.ps has become redundant. Since it is difficult to maintain, has a number of bugs, and is believed not to work properly anyway, it is removed. Accordingly the pdfopt shell script that used pdfopt.ps is also removed. ------------------------------------------------------------------- Thu Jan 3 11:58:51 CET 2013 - jsmeix@suse.de - Provide libijs (that is not done via "configure --with-ijs") because libijs is needed by the pdftoijs filter in the cups-filters package (see the README file in cups-filters). ------------------------------------------------------------------- Thu Sep 27 12:02:51 UTC 2012 - mmeister@suse.com - Version upgrade to 9.06. Mainly a bugfix release. * pdfwrite announcements: pdfwrite now supports the creation of PDF/A-2 files. For further details see the NEWS file. * removed moribund dumphint tool, see History9.htm and http://bugs.ghostscript.com/show_bug.cgi?id=693223 ------------------------------------------------------------------- Mon Sep 24 10:44:57 UTC 2012 - idonmez@suse.com - "export SUSE_ASNEEDED=0" disables -Wl,--as-needed linker flags, see http://bugs.ghostscript.com/show_bug.cgi?id=693100 ------------------------------------------------------------------- Thu May 10 15:49:33 CEST 2012 - jsmeix@suse.de - Require Ghostscript's font packages because the Ghostscript package provides the "Fontmap" file /usr/share/ghostscript//Resource/Init/Fontmap.GS which lists Ghostscript's fonts but the fonts itself are provided in the separated packages ghostscript-fonts-std and ghostscript-fonts-other so that a RPM requirement is needed to make sure that Ghostscript has its fonts. - Extract the catalog of devices which are actually built-in in exactly this Ghostscript and provide it as catalog.devices in the Ghostscript package. ------------------------------------------------------------------- Tue Apr 24 14:30:45 CEST 2012 - jsmeix@suse.de - Install documentation which is not installed by default (LICENSE doc/AUTHORS doc/COPYING doc/thirdparty.htm doc/WhatIsGS.htm doc/GS9_Color_Management.pdf doc/gs-vms.hlp doc/Ps2ps2.htm). - Add a link from SUSE's usual documentation directory (/usr/share/doc/packages/ghostscript/) to Ghostscript's documentation directory (/usr/share/ghostscript/9.05/doc/) because "configure --docdir=..." does not work. - Let ghostscript-mini "Conflicts: ghostscript-library". ------------------------------------------------------------------- Wed Mar 28 10:59:21 CEST 2012 - jsmeix@suse.de - Require only the basic fonts for Ghostscript (package ghostscript-fonts-std) but do not recommend optional fonts (package ghostscript-fonts-other). ------------------------------------------------------------------- Fri Mar 23 11:32:28 CET 2012 - jsmeix@suse.de - Cleaned up BuildRequires. - Explicitly specify configure --with-* versus --without-* in ghostscript.spec versus ghostscript-mini.spec to make the differences clear. ------------------------------------------------------------------- Tue Mar 20 16:07:56 CET 2012 - jsmeix@suse.de - Initial ghostscript-mini package.