Path to this page:
Subject: CVS commit: pkgsrc/print/ghostscript-agpl
From: Adam Ciarcinski
Date: 2018-09-21 14:06:46
Message id: 20180921120646.BADE6FBEE@cvs.NetBSD.org
Log Message:
ghostscript-agpl: updated to 9.25
Version 9.25:
Highlights in this release include:
This release fixes problems with argument handling, some unintended results of \
the security fixes to the SAFER file access restrictions (specifically accessing \
ICC profile files), and some additional security issues over the recent 9.24 \
release.
Note: The ps2epsi utility does not, and cannot call Ghostscript with the -dSAFER \
command line option. It should never be called with input from untrusted \
sources.
Security issues have been the primary focus of this release, including solving \
several (well publicised) real and potential exploits.
PLEASE NOTE: We strongly urge users to upgrade to this latest release to avoid \
these issues.
As well as Ghostscript itself, jbig2dec has had a significant amount of work \
improving its robustness in the face of out specification files.
IMPORTANT: We are in the process of forking LittleCMS. LCMS2 is not thread safe, \
and cannot be made thread safe without breaking the ABI. Our fork will be thread \
safe, and include performance enhancements (these changes have all be been \
offered and rejected upstream). We will maintain compatibility between \
Ghostscript and LCMS2 for a time, but not in perpetuity. Our fork will be \
available as its own package separately from Ghostscript (and MuPDF).
The usual round of bug fixes, compatibility changes, and incremental improvements.
Files: