Index | Thread | Search

From:
Matthias Kilian <kili@outback.escape.de>
Subject:
Re: [Security] print/ghostscript/gnu 10.03.1
To:
Volker Schlecht <openbsd-ports@schlecht.dev>
Cc:
ports@openbsd.org
Date:
Sun, 19 May 2024 20:57:55 +0200

Download raw body.

Thread
Hi,

On Fri, May 17, 2024 at 07:37:35PM +0200, Volker Schlecht wrote:
> A security release for ghostscript has just hit the github site. Surprisingly
> the release is dated May 2nd, but the ghostscript homepage doesn't reference the
> new version - the docs are up however:
> 
> https://ghostscript.readthedocs.io/en/gs10.03.1/News.html
> 
> The diff is reasonably short and limited to the named fixes:
> 
> https://git.ghostscript.com/?p=ghostpdl.git;a=log;h=refs/heads/gs10.03.1
> 
> ok for -current and -stable?

Please keep the old value of SITES; with the new one, I couldn't
fetch the distfile.

Otherwise ok.

Ciao,
	Kili

> Index: Makefile
> ===================================================================
> RCS file: /cvs/ports/print/ghostscript/gnu/Makefile,v
> diff -u -p -r1.130 Makefile
> --- Makefile	8 Mar 2024 12:19:00 -0000	1.130
> +++ Makefile	17 May 2024 17:26:47 -0000
> @@ -1,12 +1,12 @@
>  COMMENT =	PostScript and PDF interpreter
>  
> -VERSION =	10.03.0
> +VERSION =	10.03.1
>  DISTNAME =	ghostscript-${VERSION}
>  EXTRACT_SUFX =	.tar.xz
>  CATEGORIES =	lang print
>  SHARED_LIBS =	gs 18.2
>  
> -SITES =		https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs${VERSION:S/.//g}/
> +SITES =		https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/${VERSION}/
>  
>  PORTROACH =	site:https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/
>  
> Index: distinfo
> ===================================================================
> RCS file: /cvs/ports/print/ghostscript/gnu/distinfo,v
> diff -u -p -r1.25 distinfo
> --- distinfo	8 Mar 2024 12:19:00 -0000	1.25
> +++ distinfo	17 May 2024 17:26:47 -0000
> @@ -1,2 +1,2 @@
> -SHA256 (ghostscript-10.03.0.tar.xz) = 8l/0kacm2IPwsPnIr5uJXGdM93zd2BSqOCSzIj9DnuU=
> -SIZE (ghostscript-10.03.0.tar.xz) = 68041176
> +SHA256 (ghostscript-10.03.1.tar.xz) = FXIS7clrjMxAlHXc4uSYM/tEJ/FQxFUlje2WMsEGq+4=
> +SIZE (ghostscript-10.03.1.tar.xz) = 68048612