From: Volker Schlecht <openbsd-ports@schlecht.dev>
Subject: Re: [Security] print/ghostscript/gnu 10.03.1
To: ports@openbsd.org
Date: Sun, 19 May 2024 20:12:59 +0200

Pinging early because it's a security release ...

On 2024-05-17 19:37, Volker Schlecht wrote:
>A security release for ghostscript has just hit the github site. Surprisingly
>the release is dated May 2nd, but the ghostscript homepage doesn't reference the
>new version - the docs are up however:
>
>https://ghostscript.readthedocs.io/en/gs10.03.1/News.html
>
>The diff is reasonably short and limited to the named fixes:
>
>https://git.ghostscript.com/?p=ghostpdl.git;a=log;h=refs/heads/gs10.03.1
>
>ok for -current and -stable?
>

>Index: Makefile
>===================================================================
>RCS file: /cvs/ports/print/ghostscript/gnu/Makefile,v
>diff -u -p -r1.130 Makefile
>--- Makefile	8 Mar 2024 12:19:00 -0000	1.130
>+++ Makefile	17 May 2024 17:26:47 -0000
>@@ -1,12 +1,12 @@
> COMMENT =	PostScript and PDF interpreter
>
>-VERSION =	10.03.0
>+VERSION =	10.03.1
> DISTNAME =	ghostscript-${VERSION}
> EXTRACT_SUFX =	.tar.xz
> CATEGORIES =	lang print
> SHARED_LIBS =	gs 18.2
>
>-SITES =		https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs${VERSION:S/.//g}/
>+SITES =		https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/${VERSION}/
>
> PORTROACH =	site:https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/
>
>Index: distinfo
>===================================================================
>RCS file: /cvs/ports/print/ghostscript/gnu/distinfo,v
>diff -u -p -r1.25 distinfo
>--- distinfo	8 Mar 2024 12:19:00 -0000	1.25
>+++ distinfo	17 May 2024 17:26:47 -0000
>@@ -1,2 +1,2 @@
>-SHA256 (ghostscript-10.03.0.tar.xz) = 8l/0kacm2IPwsPnIr5uJXGdM93zd2BSqOCSzIj9DnuU=
>-SIZE (ghostscript-10.03.0.tar.xz) = 68041176
>+SHA256 (ghostscript-10.03.1.tar.xz) = FXIS7clrjMxAlHXc4uSYM/tEJ/FQxFUlje2WMsEGq+4=
>+SIZE (ghostscript-10.03.1.tar.xz) = 68048612