CVS commit: pkgsrc/print/ghostscript-agpl

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Fri Sep 21 12:06:46 UTC 2018

Modified Files:
        pkgsrc/print/ghostscript-agpl: Makefile.common distinfo

Log Message:
ghostscript-agpl: updated to 9.25

Version 9.25:

Highlights in this release include:

This release fixes problems with argument handling, some unintended results of the security fixes to the SAFER file access restrictions (specifically accessing ICC profile files), and some additional 
security issues over the recent 9.24 release.

Note: The ps2epsi utility does not, and cannot call Ghostscript with the -dSAFER command line option. It should never be called with input from untrusted sources.

Security issues have been the primary focus of this release, including solving several (well publicised) real and potential exploits.

PLEASE NOTE: We strongly urge users to upgrade to this latest release to avoid these issues.

As well as Ghostscript itself, jbig2dec has had a significant amount of work improving its robustness in the face of out specification files.

IMPORTANT: We are in the process of forking LittleCMS. LCMS2 is not thread safe, and cannot be made thread safe without breaking the ABI. Our fork will be thread safe, and include performance 
enhancements (these changes have all be been offered and rejected upstream). We will maintain compatibility between Ghostscript and LCMS2 for a time, but not in perpetuity. Our fork will be available 
as its own package separately from Ghostscript (and MuPDF).

The usual round of bug fixes, compatibility changes, and incremental improvements.


To generate a diff of this commit:
cvs rdiff -u -r1.14 -r1.15 pkgsrc/print/ghostscript-agpl/Makefile.common
cvs rdiff -u -r1.21 -r1.22 pkgsrc/print/ghostscript-agpl/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/print/ghostscript-agpl/Makefile.common
diff -u pkgsrc/print/ghostscript-agpl/Makefile.common:1.14 pkgsrc/print/ghostscript-agpl/Makefile.common:1.15
--- pkgsrc/print/ghostscript-agpl/Makefile.common:1.14  Wed Sep  5 13:19:40 2018
+++ pkgsrc/print/ghostscript-agpl/Makefile.common       Fri Sep 21 12:06:46 2018
@@ -1,5 +1,5 @@
-# $NetBSD: Makefile.common,v 1.14 2018/09/05 13:19:40 adam Exp $
+# $NetBSD: Makefile.common,v 1.15 2018/09/21 12:06:46 adam Exp $
 # used by print/ghostscript-agpl/Makefile
 # used by fonts/ghostscript-cidfonts-ryumin/Makefile
 
-GS_VERSION=    9.24
+GS_VERSION=    9.25

Index: pkgsrc/print/ghostscript-agpl/distinfo
diff -u pkgsrc/print/ghostscript-agpl/distinfo:1.21 pkgsrc/print/ghostscript-agpl/distinfo:1.22
--- pkgsrc/print/ghostscript-agpl/distinfo:1.21 Wed Sep  5 13:19:40 2018
+++ pkgsrc/print/ghostscript-agpl/distinfo      Fri Sep 21 12:06:46 2018
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.21 2018/09/05 13:19:40 adam Exp $
+$NetBSD: distinfo,v 1.22 2018/09/21 12:06:46 adam Exp $
 
-SHA1 (ghostscript-9.24.tar.xz) = 46a605c2576f9b11a733f6854845dcb4c24d9e10
-RMD160 (ghostscript-9.24.tar.xz) = 747080f3e33a5b35e2f5c6e25e837d94903d7e9f
-SHA512 (ghostscript-9.24.tar.xz) = dcbeeb5d3dd5ccaf949dc4be68363c50b1d35e647be4790a50b1bbf5f259f1d9181f705be27bfca708c4d270f945ff4b24e3db10b57800c1ee0ea7a40931c547
-Size (ghostscript-9.24.tar.xz) = 33015704 bytes
+SHA1 (ghostscript-9.25.tar.xz) = 9d8ddff3382113bf4a1640368350e05652c93613
+RMD160 (ghostscript-9.25.tar.xz) = f549670b7b16fbeed723afdf8f72ed39460ecbc2
+SHA512 (ghostscript-9.25.tar.xz) = 7a1c0b7546ed523f50c1452d4a1c13fcf043d6060fc9708bbc4b543f66ecb1b619b6e71998094ac702ef44a2fd159b6523271de19b1cae352981ef51fb637651
+Size (ghostscript-9.25.tar.xz) = 33027708 bytes
 SHA1 (patch-base_gserrors_h) = ce75cfb7528871842a3bd35e18a6d91c89823909
 SHA1 (patch-base_lib.mak) = 723926f167b49568376ef0c0da6aa4ec01fe1516
 SHA1 (patch-base_mkromfs.c) = 96006928e0b5381e7101027372b6e6408f1c4a0b