Next | Query returned 120 messages, browsing 1 to 10 | Previous

History of commit frequency

CVS Commit History:


   2024-03-11 22:29:17 by Amitai Schleier | Files touched by this commit (2)
Log message:
ghostscript-agpl: fix macOS (with new-clang only?).
   2024-03-11 13:45:37 by Thomas Klausner | Files touched by this commit (4) | Package updated
Log message:
ghostscript-agpl: update to 10.03.0.

Version 10.03.0 (2024-03-06)

Highlights in this release include:

  • A vulnerability was identified in the way Ghostscript/GhostPDL called
    tesseract for the OCR devices, which could allow arbitrary code execution.
    As as result, we strongly urge anyone including the OCR devices in their
    build to update as soon as possible.
  • As of this release (10.03.0) pdfwrite creates PDF files with XRef streams
    and ObjStm streams. This can result in considerably smaller PDF output
    files. See Vector Devices for more details.
  • Ghostscript/pdfwrite now supports passing through PDF "Optional \ 
Content".
  • Our efforts in code hygiene and maintainability continue.
  • The usual round of bug fixes, compatibility changes, and incremental
    improvements.

Incompatible changes

  • (10.03.0) Almost all the "internal" PostScript procedures \ 
defined during
    the interpreter startup are now "executeonly", further reducing \ 
the attack
    surface of the interpreter.

    The nature of these procedures means there should be no impact for
    legitimate usage, but it is possible it will impact uses which abuse the
    previous accessibility (even for legitimate reasons). Such cases may now
    require "DELAYBIND", See DELAYBIND
  • (10.03.0) The "makeimagedevice" non-standard operator has been \ 
removed. It
    allowed low level access to the graphics library in a way that was,
    essentially impossible to secure.
  • (10.03.0) The "putdeviceprops", "getdeviceprops", \ 
"finddevice",
    "copydevice", "findprotodevice" non-standard operators \ 
have all been
    removed. They provided functionality that is either accessible through
    standard operators, or should not be used by user PostScript.
  • (10.03.0) The process of "tidying" the PostScript namespace \ 
should have
    removed only non-standard and undocumented operators. Nevertheless, it is
    possible that any integrations or utilities that rely on those non-standard
    and undocumented operators may stop working or may change behaviour.

    If you encounter such a case, please contact us (Discord, #ghostscript IRC
    channel, or the gs-devel mailing list would be best), and we'll work with
    you to either find an alternative solution or return the previous
    functionality, if there is genuinely no other option.
   2023-11-13 19:26:25 by Thomas Klausner | Files touched by this commit (1)
Log message:
ghostscript-agpl: fix CONFLICTS pattern for gambc

Fixes PR 57697.
   2023-11-12 14:24:43 by Thomas Klausner | Files touched by this commit (2570)
Log message:
*: revebump for new brotli option for freetype2

Addresses PR 57693
   2023-11-08 14:21:43 by Thomas Klausner | Files touched by this commit (2377)
Log message:
*: recursive bump for icu 74.1
   2023-11-03 10:14:16 by Adam Ciarcinski | Files touched by this commit (3) | Package updated
Log message:
ghostscript-agpl: updated to 10.02.1

Ghostscript/GhostPDL 10.02.1

Patch release to address some security bugs
   2023-10-25 00:11:51 by Thomas Klausner | Files touched by this commit (2298)
Log message:
*: bump for openssl 3
   2023-10-23 12:59:33 by Adam Ciarcinski | Files touched by this commit (1)
Log message:
ghostscript-agpl: PLIST fix
   2023-10-21 19:11:59 by Greg Troxel | Files touched by this commit (1345) | Package updated
Log message:
recursive revbump for tiff update
   2023-10-19 17:31:42 by Thomas Klausner | Files touched by this commit (3) | Package updated
Log message:
ghostscript-agpl: update to 10.02.0.

Version 10.02.0 (2023-08-30)

Highlights in this release include:

    The old, PostScript based PDF interpreter has been removed, it
    is no longer available.

    We've continued to improve the performance of the PDF interpreter
    written in C and improve it's behaviour in edge and
    out-of-specification cases.

    Our efforts in code hygiene and maintainability continue, with
    a particular focus on fuzz testing.

    The usual round of bug fixes, compatibility changes, and
    incremental improvements.

    (9.53.0) We have added the capability to build with the Tesseract
    OCR engine. In such a build, new devices are available
    (pdfocr8/pdfocr24/pdfocr32) which render the output file to an
    image, OCR that image, and output the image "wrapped" up as a
    PDF file, with the OCR generated text information included as
    "invisible" text (in PDF terms, text rendering mode 3).

    Mainly due to time constraints, we only support including
    Tesseract from source included in our release packages, and
    not linking to Tesseract/Leptonica shared libraries. Whether
    we add this capability will be largely dependent on community
    demand for the feature.

Next | Query returned 120 messages, browsing 1 to 10 | Previous