From: Matthias Kilian <kili@outback.escape.de>
Subject: Re: [Update] print/ghostscript/gnu 10.08.0
To: Volker Schlecht <openbsd-ports@schlecht.dev>
Cc: ports <ports@openbsd.org>
Date: Tue, 8 Sep 2026 22:21:37 +0200

Hi,

On Tue, Sep 08, 2026 at 09:17:18PM +0200, Volker Schlecht wrote:
> Update to the latest release, no symbols added nor removed,
> print/lilypond rebuilds: In short, it looks harmless.

If if works for you, ok kilI@

> The changelog hints at fixing "potential security issues",
> whatever that means:

I took a (very) short look at the diff between 10.07.1. and 10.08.0,
and found this little gem, which may be *one* of those issues:

@@ -2285,7 +2291,7 @@ pdf14_get_buffer_information(const gx_device * dev,
                          gs_alloc_bytes(mem,
                                         planestride *
                                                 (buf->n_chan +
-                                                 buf->has_tags ? 1 : 0) + CAL_SLOP,
+                                                 (buf->has_tags ? 1 : 0)) + CAL_SLOP,

					"pdf14_get_buffer_information");
             if (transbuff->transbytes == NULL)
                 return gs_error_VMerror;

Ciao,
	Kili