#

# Important notes regarding the package:

# ======================================

# 1) This package has GUI versions (*-x11, *-gtk), but we are not shipping the

#    desktop files, because the GUI versions are used for displaying of files

#    invoked from command line. The displaying GUI does not contain any buttons

#    or other means for user interaction. It can't even open a different file

#    from the GUI version. Therefore it does not make sense to ship desktop

#    files...

# === GLOBAL MACROS ===========================================================

# According to Fedora Package Guidelines, it is advised that packages that can

# process untrusted input are build with position-independent code (PIC).

#

# Koji should override the compilation flags and add the -fPIC or -fPIE flags by

# default. This is here just in case this wouldn't happen for some reason.

# For more info: https://fedoraproject.org/wiki/Packaging:Guidelines#PIE

%global _hardened_build 1

# By redefining the '_docdir_fmt' macro we override the default location of

# documentation or license files. Instead of them being located in 'libgs'

# folder, they are now located in 'ghostscript'.

%global _docdir_fmt     %{name}

# NOTE: Artifex is using Github only as a mirror for providing the source

#       tarballs, and their release tags/branches do not use the dot in version

#       tag. This makes obtaining the current version harder, and might prevent

#       automatic builds of new releases...

%global version_short   %(echo "%{version}" | tr -d '.')

# Obtain the location of Google Droid fonts directory:

%global google_droid_fontpath %%(dirname $(fc-list : file | grep "DroidSansFallback"))

# =============================================================================

Name:             ghostscript

Summary:          Interpreter for PostScript language & PDF

Version:          9.25

Release:          7%{?dist}

License:          AGPLv3+

URL:              https://ghostscript.com/

Source:           https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs%{version_short}/ghostscript-%{version}.tar.xz

Requires:         libgs%{?_isa} = %{version}-%{release}

# Auxiliary build requirements:

BuildRequires:    automake

BuildRequires:    gcc

BuildRequires:    git

# Already packaged Resources -- needed to build package correctly:

BuildRequires:    adobe-mappings-cmap-devel

BuildRequires:    adobe-mappings-pdf-devel

BuildRequires:    google-droid-sans-fonts

BuildRequires:    urw-base35-fonts-devel

# Already packaged software -- needed for debundling of Ghostscript:

BuildRequires:    cups-devel

BuildRequires:    dbus-devel

BuildRequires:    fontconfig-devel

BuildRequires:    freetype-devel

BuildRequires:    jbig2dec-devel

BuildRequires:    lcms2-devel

BuildRequires:    libidn-devel

BuildRequires:    libijs-devel

BuildRequires:    libjpeg-turbo-devel

BuildRequires:    libpng-devel

BuildRequires:    libpaper-devel

BuildRequires:    libtiff-devel

BuildRequires:    openjpeg2-devel

BuildRequires:    zlib-devel

# Enabling the GUI possibilities of Ghostscript:

BuildRequires:    gtk3-devel

BuildRequires:    libXt-devel

# =============================================================================

# NOTE: 'autosetup' macro (below) uses 'git' for applying the patches:

#       ->> All the patches should be provided in 'git format-patch' format.

#       ->> Auxiliary repository will be created during 'fedpkg prep', you

#           can see all the applied patches there via 'git log'.

# Upstream patches -- official upstream patches released by upstream since the

# ----------------    last rebase that are necessary for any reason:

#Patch000: example000.patch

Patch000: ghostscript-cve-2018-19409.patch

Patch001: ghostscript-cve-2018-18073.patch

Patch002: ghostscript-cve-2018-17961.patch

Patch003: ghostscript-cve-2018-18284.patch

Patch004: ghostscript-cve-2018-19134.patch

Patch005: ghostscript-cve-2018-19475.patch

Patch006: ghostscript-cve-2018-19476.patch

Patch007: ghostscript-cve-2018-19477.patch

Patch008: ghostscript-cve-2019-6116.patch

Patch009: ghostscript-cve-2019-6116-downstream.patch

Patch010: ghostscript-cve-2019-3839.patch

Patch011: ghostscript-cve-2019-3835.patch

Patch012: ghostscript-cve-2019-3838.patch

Patch013: ghostscript-fix-DSC-comment-parsing.patch

Patch014: ghostscript-pdf2dsc-regression.patch

Patch015: ghostscript-cve-2019-10216.patch

Patch016: ghostscript-cve-2019-14811-14812-14813.patch

Patch017: ghostscript-cve-2019-14817.patch

Patch018: ghostscript-cve-2019-14869.patch

# Downstream patches -- these should be always included when doing rebase:

# ------------------

Patch100: ghostscript-9.23-100-run-dvipdf-securely.patch

# Downstream patches for RHEL -- patches that we keep only in RHEL for various

# ---------------------------    reasons, but are not enabled in Fedora:

%if %{defined rhel} || %{defined centos}

#Patch200: example200.patch

%endif

# Patches to be removed -- deprecated functionality which shall be removed at

# ---------------------    some point in the future:

%description

This package provides useful conversion utilities based on Ghostscript software,

for converting PS, PDF and other document formats between each other.

Ghostscript is a suite of software providing an interpreter for Adobe Systems'

PostScript (PS) and Portable Document Format (PDF) page description languages.

Its primary purpose includes displaying (rasterization & rendering) and printing

of document pages, as well as conversions between different document formats.

# === SUBPACKAGES =============================================================

# Below requirements are resources, which are not detected by RPM automatically:

%package -n libgs

Summary:          Library providing Ghostcript's core functionality

Requires:         adobe-mappings-cmap

Requires:         adobe-mappings-cmap-deprecated

Requires:         adobe-mappings-pdf

Requires:         google-droid-sans-fonts

Requires:         urw-base35-fonts

%description -n libgs

This library provides Ghostscript's core functionality, based on Ghostscript's

API, which is useful for many packages that are build on top of Ghostscript.

# ---------------

%package -n libgs-devel

Summary:          Development files for Ghostscript's library

Requires:         libgs%{?_isa} = %{version}-%{release}

# This virtual provides is useful in case people get confused what *-devel

# subpackage they should actually use (i.e. ghostscript-devel vss libgs-devel?).

# By having this virtual provide both of the options above will work...

Provides:         %{name}-devel         = %{version}-%{release}

Provides:         %{name}-devel%{?_isa} = %{version}-%{release}

%description -n libgs-devel

This package contains development files that are useful for building packages

against Ghostscript's library, which provides Ghostscript's core functionality.

# ---------------

# NOTE: The 'dvipdf' utility invokes 'dvips', which is part of 'texlive-dvips'.

#       This requirement pulls in a lot of texlive subpackages. Not all users

#       need to use this utility, nor they wish to have a lot of disk space to

#       be used by 'texlive'. Therefore the specific subpackage is necessary.

#

#       Previously, the 'dvips' was moving between packages before, so it's

#       more convenient (even for users) to have a direct requiremnt for the

#       executable instead of package.

%package tools-dvipdf

Summary:          Ghostscript's 'dvipdf' utility

Requires:         %{name}%{?_isa} = %{version}-%{release}

Requires:         %{_bindir}/dvips

%description tools-dvipdf

This package provides the utility 'dvipdf' for converting of TeX DVI files into

PDF files using Ghostscript and dvips.

# ---------------

%package tools-fonts

Summary:          Ghostscript's font utilities

Requires:         %{name}%{?_isa} = %{version}-%{release}

%description tools-fonts

This package provides utilities which are useful when you are working with AFM,

PFB or PFA files, mostly for conversion purposes.

# ---------------

%package tools-printing

Summary:          Ghostscript's printing utilities

Requires:         %{name}%{?_isa} = %{version}-%{release}

%description tools-printing

This package provides utilities for formatting and printing text files using

either Ghostscript, or BubbleJet, DeskJet, DeskJet 500, and LaserJet printers.

It also provides the utility 'pphs', which is useful for printing of Primary

Hint Stream of a linearized PDF file.

# ---------------

%package gtk

Summary:          Ghostscript's GTK-based document renderer

Requires:         libgs%{?_isa} = %{version}-%{release}

%description gtk

This package provides GTK-based utility 'gsx', which can be used for displaying

of various document files (including PS and PDF).

# ---------------

%package x11

Summary:          Ghostscript's X11-based driver for document rendering

Requires:         %{name}%{?_isa} = %{version}-%{release}

%description x11

This package provides X11-based driver for Ghostscript, which enables displaying

of various document files (including PS and PDF).

# ---------------

%package doc

Summary:          Documentation files for Ghostscript

Requires:         %{name} = %{version}-%{release}

BuildArch:        noarch

%description doc

This package provides detailed documentation files for Ghostscript software.

# === BUILD INSTRUCTIONS ======================================================

# Call the 'autosetup' macro to prepare the environment, but do not patch the

# source code yet -- we need to remove bundled software before the build first:

%prep

%autosetup -N -S git

# Libraries that we already have packaged in Fedora (see Build Requirements):

rm -rf cups/libs freetype ijs jbig2dec jpeg lcms2* libpng openjpeg tiff zlib

# Yeah, not actually needed in Fedora (^_^):

rm -rf windows

# Add the remaining source code to the initial commit, patch the source code:

git add --all --force .

git commit --all --amend --no-edit > /dev/null

%autopatch -p1

# ---------------

%build

# --enable-dynamic

#     ... enables dynamically loaded drivers

#

# --disable-compile-inits

#     ... disables compiling of init files (PS code, fonts, etc.) into resulting

#         binaries, so they are loaded dynamically

#

# --without-versioned-path

#     ... tells configure to not use version string in the resulting paths after

#         'make_install' macro - this is safe, because only one version of

#         package can be installed at a given time on Fedora distribution,

#         so we won't end up with conflicting folders when doing rebase

#

# --with-fonthpath

#     ... searches for necessary fonts in these column-separated directories,

#         not just default ones

#

# NOTE:   In RHEL we need to keep the /usr/share/ghostscript/conf.d/ folder

#         for China's GB18030 official certification:

%if %{defined rhel} || %{defined centos}

%configure --enable-dynamic --disable-compile-inits --without-versioned-path \

           --with-fontpath="%{urw_base35_fontpath}:%{google_droid_fontpath}:%{_datadir}/%{name}/conf.d/:%{_datadir}/fonts"

%else

%configure --enable-dynamic --disable-compile-inits --without-versioned-path \

           --with-fontpath="%{urw_base35_fontpath}:%{google_droid_fontpath}"

%endif

%make_build so

# ---------------

%install

# Using the 'make_install' macro with 'soinstall' target would result in some

# files being installed unnecessary, so we are using traditional way:

make DESTDIR=%{buildroot} soinstall

# Remove files that we do not want ship / support:

# ------------------------------------------------

# LPR-related scripts:

rm -f %{buildroot}%{_bindir}/{lprsetup.sh,unix-lpr.sh}

# Rename the dynamic binary to be used by default as 'gs' binary.

mv -f %{buildroot}%{_bindir}/{gsc,gs}

# Remove useless files from doc/ directory and doc/ symlink:

rm -f %{buildroot}%{_docdir}/%{name}/{AUTHORS,COPYING,*.tex,*.hlp,*.txt}

rm -f %{buildroot}%{_datadir}/%{name}/doc

# ---------------

# Move html documentation into html/ subdir:

install -m 0755 -d %{buildroot}%{_docdir}/%{name}/html

mv -f %{buildroot}%{_docdir}/%{name}/{*.htm*,*.el,html}

# ---------------

# Create 'ghostscript' symlink for its binary:

ln -s %{_bindir}/gs %{buildroot}%{_bindir}/ghostscript

# Create a man page symlink for 'ghostscript':

ln -s %{_mandir}/man1/gs.1 %{buildroot}%{_mandir}/man1/ghostscript.1

# ---------------

# According to upstream, using fontconfig for fonts lookup is quite a slow

# process for Ghostscript startup, and they advise using the symlinks where

# possible. The fontconfig (Ghostscript's search path) should be used preferably

# as a fallback only.

ln -fs %{google_droid_fontpath}/DroidSansFallback.ttf %{buildroot}%{_datadir}/%{name}/Resource/CIDFSubst/DroidSansFallback.ttf

for font in $(basename --multiple %{buildroot}%{_datadir}/%{name}/Resource/Font/*); do

  ln -fs %{urw_base35_fontpath}/${font}.t1 %{buildroot}%{_datadir}/%{name}/Resource/Font/${font}

done

# Using the system-wide available CMap files from Adobe via Ghostscript's search

# path is not safe (nor was ever intended to be supported) way of doing so

# according to upstream. Their preferred solution is to just create symlink for

# each of the CMap files in Ghostscript's Resources/CMap folder.

for file in $(basename --multiple %{buildroot}%{_datadir}/%{name}/Resource/CMap/*); do

  find %{adobe_mappings_rootpath} -type f -name ${file} -exec ln -fs {} %{buildroot}%{_datadir}/%{name}/Resource/CMap/${file} \;

done

# Create the configuration folder fo RHEL:

%if %{defined rhel} || %{defined centos}

  install -m 0755 -d %{buildroot}%{_datadir}/%{name}/conf.d/

%endif

# === INSTALLATION INSTRUCTIONS ===============================================

%ldconfig_scriptlets -n libgs

# === PACKAGING INSTRUCTIONS ==================================================

%files -n libgs

%license LICENSE doc/COPYING

%{_libdir}/libgs.so.*

%{_datadir}/%{name}/

# Include the configuration folder for RHEL:

%if %{defined rhel} || %{defined centos}

  %dir %{_datadir}/%{name}/conf.d/

%endif

# ---------------

%files -n libgs-devel

%{_libdir}/libgs.so

%{_includedir}/%{name}/

# ---------------

%files

%{_bindir}/gs

%{_bindir}/gsnd

%{_bindir}/ghostscript

# Useful conversion scripts:

%{_bindir}/eps2*

%{_bindir}/pdf2*

%{_bindir}/ps2*

%{_mandir}/man1/gs.1*

%{_mandir}/man1/gsnd*

%{_mandir}/man1/ghostscript*

%{_mandir}/man1/eps2*

%{_mandir}/man1/pdf2*

%{_mandir}/man1/ps2*

%lang(de) %{_mandir}/de/man1/gsnd*

%lang(de) %{_mandir}/de/man1/eps2*

%lang(de) %{_mandir}/de/man1/pdf2*

%lang(de) %{_mandir}/de/man1/ps2*

# ---------------

%files tools-dvipdf

%{_bindir}/dvipdf

%{_mandir}/man1/dvipdf*

%lang(de) %{_mandir}/de/man1/dvipdf*

# ---------------

%files tools-fonts

%{_bindir}/pf2afm

%{_bindir}/pfbtopfa

%{_bindir}/printafm

%{_mandir}/man1/pf2afm*

%{_mandir}/man1/pfbtopfa*

%{_mandir}/man1/printafm*

%lang(de) %{_mandir}/de/man1/printafm*

# ---------------

%files tools-printing

%{_bindir}/gsbj

%{_bindir}/gsdj

%{_bindir}/gsdj500

%{_bindir}/gslj

%{_bindir}/gslp

%{_bindir}/pphs

%{_mandir}/man1/gsbj*

%{_mandir}/man1/gsdj*

%{_mandir}/man1/gslj*

%{_mandir}/man1/gslp*

# ---------------

%files gtk

%{_bindir}/gsx

# ---------------

%files x11

%{_libdir}/%{name}/

# ---------------

%files doc

%doc %{_docdir}/%{name}/

# =============================================================================

%changelog

* Tue Apr 07 2020 Zdenek Dohnal <zdohnal@redhat.com> - 9.25-7

- 1813228 - ghostscript fontconfig support broken when gs used with -dSAFER/-dPARANOIDSAFER

* Thu Nov 07 2019 Zdenek Dohnal <zdohnal@redhat.com> - 9.25-6

- 1769343 - CVE-2019-14869 - -dSAFER escape in .charkeys

* Thu Aug 22 2019 Martin Osvald <mosvald@redhat.com> - 9.25-5

- Resolves: #1744011 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)

- Resolves: #1744015 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)

- Resolves: #1744006 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)

- Resolves: #1744231 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)

* Mon Aug 05 2019 Martin Osvald <mosvald@redhat.com> - 9.25-4

- Resolves: #1737337 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 (701394)

* Thu Mar 28 2019 Martin Osvald <mosvald@redhat.com> - 9.25-3

- Resolves: #1692798 - CVE-2019-3839 ghostscript: missing attack vector

  protections for CVE-2019-6116

- Resolves: #1678170 - CVE-2019-3835 ghostscript: superexec operator

  is available (700585)

- Resolves: #1691414 - CVE-2019-3838 ghostscript: forceput in DefineResource

  is still accessible (700576)

- fix included for ghostscript: Regression: double comment chars

  '%%' in gs_init.ps leading to missing metadata

- fix for pdf2dsc regression added to allow fix for CVE-2019-3839

* Wed Jan 23 2019 Martin Osvald <mosvald@redhat.com> - 9.25-2

- Resolves: #1652937 - CVE-2018-19409 ghostscript: Improperly implemented

  security check in zsetdevice function in psi/zdevice.c

- Resolves: #1642586 - CVE-2018-18073 ghostscript: saved execution stacks

  can leak operator arrays

- Resolves: #1642580 - CVE-2018-17961 ghostscript: saved execution stacks

  can leak operator arrays (incomplete fix for CVE-2018-17183)

- Resolves: #1642941 - CVE-2018-18284 ghostscript: 1Policy operator

  allows a sandbox protection bypass

- Resolves: #1656336 - CVE-2018-19134 ghostscript: Type confusion in

  setpattern (700141)

- Resolves: #1660571 - CVE-2018-19475 ghostscript: access bypass in

  psi/zdevice2.c (700153)

- Resolves: #1660830 - CVE-2018-19476 ghostscript: access bypass in

  psi/zicc.c

- Resolves: #1661280 - CVE-2018-19477 ghostscript: access bypass in

  psi/zfjbig2.c (700168)

- Resolves: #1668891 - CVE-2019-6116 ghostscript: subroutines within

  pseudo-operators must themselves be pseudo-operators (700317)

* Mon Sep 24 2018 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.25-1

- rebase to latest upstream version to fix issues discovered in previous CVE fixes (bug #1631701 and #1626997)

* Fri Sep 07 2018 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.24-1

- rebase to latest upstream version, which contains important CVE fixes

- additional ZER0-DAY fixes added

* Wed Aug 29 2018 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.23-5

- ghostscript-9.23-002-fixes-for-set-of-CVEs-reported-by-Google.patch added

* Tue May 15 2018 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.23-4

- One more rebuild for libidn ABI fix (BZ#'s 1573961 and 1566414)

* Mon May 14 2018 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.23-3

- %%conflicts_vers bumped to fix F27->F28 upgrade

* Mon Apr 23 2018 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.23-2

- Fix for CVE-2018-10194 added (bug #1569821)

* Wed Mar 21 2018 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.23-1

- Rebase to latest upstream version

* Thu Mar 08 2018 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.22-10

- %%{isa} removed in Conflicts for ghostscript-core in libgs package

* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 9.22-9

- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

* Mon Feb 05 2018 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 9.22-8

- Switch to %%ldconfig_scriptlets

  >> https://fedoraproject.org/wiki/Changes/Removing_ldconfig_scriptlets

* Mon Jan 22 2018 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 9.22-7

- Fix Obsoletes

  >> https://github.com/rpm-software-management/rpm/commit/9e8e8bcfb1b1fa35

* Sat Jan 20 2018 Björn Esser <besser82@fedoraproject.org> - 9.22-6

- Rebuilt for switch to libxcrypt

* Thu Jan 18 2018 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.22-5

- ghostscript-tools-dvipdf -- new subpackage

* Tue Jan 09 2018 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.22-4

- complete cleanup in ghostscript specfile according to FPG

- libgs -- new separate package (Ghostscript library)

- libgs-devel -- new separate subpackage (devel files for Ghostscript library)

- libijs -- now shipped as a separate package on Pagure

- ghostscript-tools-fonts -- new subpackage

- ghostscript-tools-printing -- new subpackage

- ghostscript-core -- changed to transitional metapackage

- package is now completely debundled from already packaged software/resources

- versioned paths for documentation, resources, etc. are no longer used

- LPR setup scripts removed (no longer shipped)

- added symlinks for direct resources location to speedup Ghostscript startup times

- Ghostscript's search path updated to include only fonts locations as a backup

- support for /usr/share/ghostscript/conf.d dropped (using Google Droid Sans Fallback instead)

- examples/ folder dropped from *-doc subpackage

* Mon Dec 04 2017 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.22-3

- Fontmap.GS lookup path for Helvetica-Narrow-Bold-Oblique font fixed (bug #1517518)

* Wed Nov 29 2017 Tom Callaway <spot@fedoraproject.org> - 9.22-2

- apply post 9.22 upstream commit to restore flushpage operator (xdvi needs it)

* Wed Sep 27 2017 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.22-1

- Rebase to latest upstream version (no API/ABI changes according to upstream)

* Wed Sep 27 2017 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-14

- Rebuilt with updated 'search path' for fonts (bug #1500105)

* Wed Sep 27 2017 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-13

- Rebuilt with new 'urw-base35-fonts' package (bug #1494563)

* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 9.20-12

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 9.20-11

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

* Wed May 03 2017 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-10

- Added security fix for CVE-2017-7975 (bug #1443940)

* Thu Apr 27 2017 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-9

- Added security fixes for:

  - CVE-2016-10217 (bug #1441564)

  - CVE-2016-10218 (bug #1441568)

  - CVE-2016-10219 (bug #1441569)

  - CVE-2016-10220 (bug #1441571)

  - CVE-2017-5951  (bug #1441572)

  - CVE-2017-8291  (bug #1446063)

* Thu Apr 06 2017 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-8

- Added security fix for CVE-2017-7207 (bug #1434497)

* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 9.20-7

- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

* Tue Jan 24 2017 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-6

- Remove and (re-implement) ConvertUTF.c (bug #1404933)

- Added security fix for CVE-2016-9601 (bug #1410021)

* Thu Nov  3 2016 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-5

- Added fix to avoid SIGSEGV for some *.ps files. More info here:

  <http://bugs.ghostscript.com/show_bug.cgi?id=697286>

* Tue Nov  1 2016 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-4

- Added security fix for CVE-2016-7977 (bug #1380415)

* Tue Nov  1 2016 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-3

- Added security fix for CVE-2016-8602 (bug #1383940)

* Fri Oct  7 2016 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-2

- Added security fixes for:

  - CVE-2016-7979 (bug #1382305)

  - CVE-2016-7976 (bug #1382294)

  - CVE-2016-7978 (bug #1382300)

* Fri Oct  7 2016 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-1

- Rebase to latest ghostscript-9.20. Major changes in this rebase:

  - OpenJPEG support has been re-enabled

  - ijs-config custom tool has been removed (pkg-config is used by default)

  - old irrelevant patches removed (changes are part of upstream release now)

  - remaining patches has been updated & renamed

  - no API/ABI changes according to upstream

* Tue Oct  4 2016 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.16-5

- [TEMPORARY] Support for OpenJPEG disabled for builds to pass.

- Security fix for BZ #1380416 backported.

* Wed Feb 03 2016 Fedora Release Engineering <releng@fedoraproject.org> - 9.16-4

- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 9.16-3

- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

* Tue Mar 31 2015 Tim Waugh <twaugh@redhat.com> 9.16-2

- Use old names for urw-fonts (bug #1207577).

* Mon Mar 30 2015 Tim Waugh <twaugh@redhat.com> 9.16-1

- 9.16.

* Sat Feb 21 2015 Till Maas <opensource@till.name> - 9.15-7

- Rebuilt for Fedora 23 Change

  https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code

* Fri Dec 19 2014 Tim Waugh <twaugh@redhat.com> 9.15-6

- Don't ship X11.so in both the main package and the x11 sub-package.

* Fri Dec 19 2014 Rex Dieter <rdieter@fedoraproject.org> 9.15-5

- fix %%_isa macro usage

* Thu Dec 18 2014 Tim Waugh <twaugh@redhat.com> 9.15-4

- New ghostscript-x11 package for X11 driver (bug #148939).

- Ghostscript not requiring X11 is now in ghostscript-core.

- The 'ghostscript' package requires both of these.

* Tue Oct  7 2014 Tim Waugh <twaugh@redhat.com> 9.15-3

- Avoid shipping ramfs source as its license is unclear. Similarly

  with some documentation and example code (bug #1149617).

* Fri Oct  3 2014 Tim Waugh <twaugh@redhat.com> 9.15-2

- Use system openjpeg2 library so we can decode JPX (upstream

  bug #695557).

* Tue Sep 23 2014 Tim Waugh <twaugh@redhat.com> 9.15-1

- 9.15. No longer need iccprofiles-initdir, gs694154, crash, sys-zlib,

  or trio-g patches.

* Tue Sep  9 2014 Tim Waugh <twaugh@redhat.com>

- No need to apply patch for already-applied gdevcups-debug-uninit.

* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 9.14-6

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

* Fri Aug 15 2014 Tim Waugh <twaugh@redhat.com> 9.14-5

- Fix double-to-string conversion on e.g. ppc64 (bug #1014772).

* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 9.14-4

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

* Wed Jun  4 2014 Tim Waugh <twaugh@redhat.com> 9.14-3

- Applied patch from upstream to fix memory handling issue that could

  lead to crashes (bug #1087071).

* Tue Jun 03 2014 Ralf Corsépius <corsepiu@fedoraproject.org> 9.14-2

- Add %%{_datadir}/ghostscript/%%{gs_dot_ver}/Resource/IdiomSet

  (RHBZ #1100338).

* Thu Mar 27 2014 Tim Waugh <twaugh@redhat.com> 9.14-1

- 9.14.

* Wed Mar 26 2014 Tim Waugh <twaugh@redhat.com> 9.12-1

- 9.12 (bug #1080814).

- Fix build when using system zlib.

* Thu Feb 27 2014 Tim Waugh <twaugh@redhat.com> 9.10-6

- Use upstream patch to fix duplex for some devices (bug #1068896).

* Tue Dec 10 2013 Tim Waugh <twaugh@redhat.com> 9.10-5

- Use upstream patches to fix gs segfaults (bug #1026428, bug #1039718).

* Wed Sep 25 2013 Tim Waugh <twaugh@redhat.com> 9.09-4

- Regenerate tarball (bug #1000387).

* Wed Aug 28 2013 Tim Waugh <twaugh@redhat.com> 9.09-3

- Remove jpegxr to ensure it isn't built (bug #1000387).

* Thu Aug 22 2013 Tim Waugh <twaugh@redhat.com> 9.09-2

- Fixed character set conversion issue in pdfwrite (bug #999927).

* Thu Aug 22 2013 Tim Waugh <twaugh@redhat.com> 9.09-1

- 9.09.

* Sat Aug 17 2013 Tim Waugh <twaugh@redhat.com> 9.09-0.rc1.1

- 9.09rc1.

* Thu Aug 15 2013 Tim Waugh <twaugh@redhat.com> 9.08-1

- 9.08.

* Mon Aug 12 2013 Tim Waugh <twaugh@redhat.com> 9.08-0.rc1.1

- 9.08rc1.  CUPS filters moved to the cups-filters package.

* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 9.07-12

- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

* Thu Jul 18 2013 Tim Waugh <twaugh@redhat.com> 9.07-11