Index | Thread | Search

From:
Volker Schlecht <openbsd-ports@schlecht.dev>
Subject:
[Security] print/ghostscript/gnu 10.03.1
To:
ports@openbsd.org
Date:
Fri, 17 May 2024 19:37:35 +0200

Download raw body.

Thread
A security release for ghostscript has just hit the github site. Surprisingly
the release is dated May 2nd, but the ghostscript homepage doesn't reference the
new version - the docs are up however:

https://ghostscript.readthedocs.io/en/gs10.03.1/News.html

The diff is reasonably short and limited to the named fixes:

https://git.ghostscript.com/?p=ghostpdl.git;a=log;h=refs/heads/gs10.03.1

ok for -current and -stable?

Index: Makefile
===================================================================
RCS file: /cvs/ports/print/ghostscript/gnu/Makefile,v
diff -u -p -r1.130 Makefile
--- Makefile	8 Mar 2024 12:19:00 -0000	1.130
+++ Makefile	17 May 2024 17:26:47 -0000
@@ -1,12 +1,12 @@
 COMMENT =	PostScript and PDF interpreter
 
-VERSION =	10.03.0
+VERSION =	10.03.1
 DISTNAME =	ghostscript-${VERSION}
 EXTRACT_SUFX =	.tar.xz
 CATEGORIES =	lang print
 SHARED_LIBS =	gs 18.2
 
-SITES =		https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs${VERSION:S/.//g}/
+SITES =		https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/${VERSION}/
 
 PORTROACH =	site:https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/
 
Index: distinfo
===================================================================
RCS file: /cvs/ports/print/ghostscript/gnu/distinfo,v
diff -u -p -r1.25 distinfo
--- distinfo	8 Mar 2024 12:19:00 -0000	1.25
+++ distinfo	17 May 2024 17:26:47 -0000
@@ -1,2 +1,2 @@
-SHA256 (ghostscript-10.03.0.tar.xz) = 8l/0kacm2IPwsPnIr5uJXGdM93zd2BSqOCSzIj9DnuU=
-SIZE (ghostscript-10.03.0.tar.xz) = 68041176
+SHA256 (ghostscript-10.03.1.tar.xz) = FXIS7clrjMxAlHXc4uSYM/tEJ/FQxFUlje2WMsEGq+4=
+SIZE (ghostscript-10.03.1.tar.xz) = 68048612