]> code.ossystems Code Review - openembedded-core.git/commit
ghostscript: upgrade to 9.25
authorJagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com>
Mon, 17 Sep 2018 16:44:50 +0000 (22:14 +0530)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Thu, 20 Sep 2018 12:41:25 +0000 (05:41 -0700)
commit4340928b8878b91b5a2750eb6bc87918740511ca
treea246e148082315fe6128451c7ac4f925bd63559e
parent82886e19ba874a33e618a4854a32987884e2c058
ghostscript: upgrade to 9.25

Removed below patches, as v9.25 source already has those
changes/security fixes:

0001-Bug-699665-memory-corruption-in-aesdecode.patch
0001-pdfwrite-Guard-against-trying-to-output-an-infinite-.patch
0002-Bug-699656-Handle-LockDistillerParams-not-being-a-bo.patch
0003-Fix-Bug-699660-shading_param-incomplete-type-checkin.patch
0004-Hide-the-.shfill-operator.patch
0005-Bug-699657-properly-apply-file-permissions-to-.tempf.patch
remove-direct-symlink.patch

Re-worked ghostscript-9.21-native-fix-disable-system-libtiff.patch
and ghostscript-9.21-prevent_recompiling.patch
to fix warnings in do_patch task of ghostscript v9.25 recipe.

Highlights of ghostscript v9.25 release:
---------------------------------------
- This release fixes problems with argument handling, some unintended results
  of the security fixes to the SAFER file access restrictions
  (specifically accessing ICC profile files), and some additional security
  issues over the recent 9.24 release.

- Note: The ps2epsi utility does not, and cannot call Ghostscript with
  the -dSAFER command line option. It should never be called with input
  from untrusted sources.

- Security issues have been the primary focus of this release, including
  solving several (well publicised) real and potential exploits.

- As well as Ghostscript itself, jbig2dec has had a significant amount of work
  improving its robustness in the face of out specification files.

- IMPORTANT: We are in the process of forking LittleCMS. LCMS2 is not thread
  safe, and cannot be made thread safe without breaking the ABI.
  Our fork will be thread safe, and include performance enhancements
  (these changes have all be been offered and rejected upstream). We will
  maintain compatibility between Ghostscript and LCMS2 for a time, but not in
  perpetuity. Our fork will be available as its own package separately from
  Ghostscript (and MuPDF).

- The usual round of bug fixes, compatibility changes, and incremental
  improvements.

Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-extended/ghostscript/ghostscript/0001-Bug-699665-memory-corruption-in-aesdecode.patch [deleted file]
meta/recipes-extended/ghostscript/ghostscript/0001-pdfwrite-Guard-against-trying-to-output-an-infinite-.patch [deleted file]
meta/recipes-extended/ghostscript/ghostscript/0002-Bug-699656-Handle-LockDistillerParams-not-being-a-bo.patch [deleted file]
meta/recipes-extended/ghostscript/ghostscript/0003-Fix-Bug-699660-shading_param-incomplete-type-checkin.patch [deleted file]
meta/recipes-extended/ghostscript/ghostscript/0004-Hide-the-.shfill-operator.patch [deleted file]
meta/recipes-extended/ghostscript/ghostscript/0005-Bug-699657-properly-apply-file-permissions-to-.tempf.patch [deleted file]
meta/recipes-extended/ghostscript/ghostscript/ghostscript-9.21-native-fix-disable-system-libtiff.patch
meta/recipes-extended/ghostscript/ghostscript/ghostscript-9.21-prevent_recompiling.patch
meta/recipes-extended/ghostscript/ghostscript/remove-direct-symlink.patch [deleted file]
meta/recipes-extended/ghostscript/ghostscript_9.25.bb [moved from meta/recipes-extended/ghostscript/ghostscript_9.23.bb with 85% similarity]