Subject: CVS commit: pkgsrc/print/ghostscript-agpl
From: Adam Ciarcinski
Date: 2018-09-21 14:06:46
Message id: 20180921120646.BADE6FBEE@cvs.NetBSD.org

Log Message:
ghostscript-agpl: updated to 9.25

Version 9.25:

Highlights in this release include:

This release fixes problems with argument handling, some unintended results of \ 
the security fixes to the SAFER file access restrictions (specifically accessing \ 
ICC profile files), and some additional security issues over the recent 9.24 \ 
release.

Note: The ps2epsi utility does not, and cannot call Ghostscript with the -dSAFER \ 
command line option. It should never be called with input from untrusted \ 
sources.

Security issues have been the primary focus of this release, including solving \ 
several (well publicised) real and potential exploits.

PLEASE NOTE: We strongly urge users to upgrade to this latest release to avoid \ 
these issues.

As well as Ghostscript itself, jbig2dec has had a significant amount of work \ 
improving its robustness in the face of out specification files.

IMPORTANT: We are in the process of forking LittleCMS. LCMS2 is not thread safe, \ 
and cannot be made thread safe without breaking the ABI. Our fork will be thread \ 
safe, and include performance enhancements (these changes have all be been \ 
offered and rejected upstream). We will maintain compatibility between \ 
Ghostscript and LCMS2 for a time, but not in perpetuity. Our fork will be \ 
available as its own package separately from Ghostscript (and MuPDF).

The usual round of bug fixes, compatibility changes, and incremental improvements.

Files:
RevisionActionfile
1.15modifypkgsrc/print/ghostscript-agpl/Makefile.common
1.22modifypkgsrc/print/ghostscript-agpl/distinfo