2024-03-11 22:29:17 by Amitai Schleier | Files touched by this commit (2) |
Log message:
ghostscript-agpl: fix macOS (with new-clang only?).
|
2024-03-11 13:45:37 by Thomas Klausner | Files touched by this commit (4) | |
Log message:
ghostscript-agpl: update to 10.03.0.
Version 10.03.0 (2024-03-06)
Highlights in this release include:
• A vulnerability was identified in the way Ghostscript/GhostPDL called
tesseract for the OCR devices, which could allow arbitrary code execution.
As as result, we strongly urge anyone including the OCR devices in their
build to update as soon as possible.
• As of this release (10.03.0) pdfwrite creates PDF files with XRef streams
and ObjStm streams. This can result in considerably smaller PDF output
files. See Vector Devices for more details.
• Ghostscript/pdfwrite now supports passing through PDF "Optional \
Content".
• Our efforts in code hygiene and maintainability continue.
• The usual round of bug fixes, compatibility changes, and incremental
improvements.
Incompatible changes
• (10.03.0) Almost all the "internal" PostScript procedures \
defined during
the interpreter startup are now "executeonly", further reducing \
the attack
surface of the interpreter.
The nature of these procedures means there should be no impact for
legitimate usage, but it is possible it will impact uses which abuse the
previous accessibility (even for legitimate reasons). Such cases may now
require "DELAYBIND", See DELAYBIND
• (10.03.0) The "makeimagedevice" non-standard operator has been \
removed. It
allowed low level access to the graphics library in a way that was,
essentially impossible to secure.
• (10.03.0) The "putdeviceprops", "getdeviceprops", \
"finddevice",
"copydevice", "findprotodevice" non-standard operators \
have all been
removed. They provided functionality that is either accessible through
standard operators, or should not be used by user PostScript.
• (10.03.0) The process of "tidying" the PostScript namespace \
should have
removed only non-standard and undocumented operators. Nevertheless, it is
possible that any integrations or utilities that rely on those non-standard
and undocumented operators may stop working or may change behaviour.
If you encounter such a case, please contact us (Discord, #ghostscript IRC
channel, or the gs-devel mailing list would be best), and we'll work with
you to either find an alternative solution or return the previous
functionality, if there is genuinely no other option.
|
2023-11-13 19:26:25 by Thomas Klausner | Files touched by this commit (1) |
Log message:
ghostscript-agpl: fix CONFLICTS pattern for gambc
Fixes PR 57697.
|
2023-11-12 14:24:43 by Thomas Klausner | Files touched by this commit (2570) |
Log message:
*: revebump for new brotli option for freetype2
Addresses PR 57693
|
2023-11-08 14:21:43 by Thomas Klausner | Files touched by this commit (2377) |
Log message:
*: recursive bump for icu 74.1
|
2023-11-03 10:14:16 by Adam Ciarcinski | Files touched by this commit (3) | |
Log message:
ghostscript-agpl: updated to 10.02.1
Ghostscript/GhostPDL 10.02.1
Patch release to address some security bugs
|
2023-10-25 00:11:51 by Thomas Klausner | Files touched by this commit (2298) |
Log message:
*: bump for openssl 3
|
2023-10-23 12:59:33 by Adam Ciarcinski | Files touched by this commit (1) |
Log message:
ghostscript-agpl: PLIST fix
|
2023-10-21 19:11:59 by Greg Troxel | Files touched by this commit (1345) | |
Log message:
recursive revbump for tiff update
|
2023-10-19 17:31:42 by Thomas Klausner | Files touched by this commit (3) | |
Log message:
ghostscript-agpl: update to 10.02.0.
Version 10.02.0 (2023-08-30)
Highlights in this release include:
The old, PostScript based PDF interpreter has been removed, it
is no longer available.
We've continued to improve the performance of the PDF interpreter
written in C and improve it's behaviour in edge and
out-of-specification cases.
Our efforts in code hygiene and maintainability continue, with
a particular focus on fuzz testing.
The usual round of bug fixes, compatibility changes, and
incremental improvements.
(9.53.0) We have added the capability to build with the Tesseract
OCR engine. In such a build, new devices are available
(pdfocr8/pdfocr24/pdfocr32) which render the output file to an
image, OCR that image, and output the image "wrapped" up as a
PDF file, with the OCR generated text information included as
"invisible" text (in PDF terms, text rendering mode 3).
Mainly due to time constraints, we only support including
Tesseract from source included in our release packages, and
not linking to Tesseract/Leptonica shared libraries. Whether
we add this capability will be largely dependent on community
demand for the feature.
|