%define gs_ver 9.07

%define gs_dot_ver 9.07

%{expand: %%define build_with_freetype %{?_with_freetype:1}%{!?_with_freetype:0}}

Summary: A PostScript interpreter and renderer

Name: ghostscript

Version: %{gs_ver}

Release: 31%{?dist}.11

# Included CMap data is Redistributable, no modification permitted,

# see http://bugzilla.redhat.com/487510

License: AGPLv3+ and Redistributable, no modification permitted

URL: http://www.ghostscript.com/

Group: Applications/Publishing

Source0: ghostscript-%{gs_ver}-cleaned.tar.bz2

# ghostscript contains a jpegxr directory containing code we cannot

# ship due to licensing concerns. Therefore we use this script to

# remove that directory before shipping it. Download the upstream

# tarball and invoke this script while in the tarball's directory:

Source1: generate-tarball.sh

Source2: CIDFnmap

Source4: cidfmap

Patch1: ghostscript-multilib.patch

Patch2: ghostscript-scripts.patch

Patch3: ghostscript-noopt.patch

Patch4: ghostscript-runlibfileifexists.patch

Patch5: ghostscript-icc-missing-check.patch

Patch6: ghostscript-cups-filters.patch

Patch7: ghostscript-Fontmap.local.patch

Patch8: ghostscript-iccprofiles-initdir.patch

Patch9: ghostscript-gdevcups-debug-uninit.patch

Patch10: ghostscript-gs_sprintf.patch

Patch11: ghostscript-pdfwrite-segfault.patch

Patch12: ghostscript-strange-fonts.patch

Patch13: ghostscript-wrf-snprintf.patch

Patch14: ghostscript-cups-colord.patch

Patch15: ghostscript-zfapi-crash.patch

Patch16: ghostscript-gstoraster-costs.patch

Patch17: ghostscript-trio-g.patch

Patch18: ghostscript-crash.patch

Patch19: ghostscript-import-lcms2-2.6-changes.patch

Patch20: ghostscript-hanging-in-convert.patch

Patch21: ghostscript-check-icc-profile-errors.patch

Patch22: ghostscript-cups-icc-profile.patch

Patch28: ghostscript-handle-glyphdirectory-array.patch

Patch29: ghostscript-fix-locksafe.patch

Patch30: ghostscript-fix-infinite-for-loop.patch

Patch33: ghostscript-cope-with-negative-run-length.patch

Patch34: ghostscript-raise-VMThreshold-limit.patch

Patch35: ghostscript-fix-pxl-devices-printing.patch

Patch36: ghostscript-more-than-11-elements-in-array.patch

Patch41: ghostscript-remove-as-many-non-standard-operators-as-possible.patch

Patch47: ghostscript-restore-flushpage.patch

Patch57: ghostscript-pdf2ps-reports-error-when-reading-stdin.patch

Patch66: ghostscript-fix-DSC-comment-parsing.patch

Patch69: ghostscript-pdf2dsc-regression.patch

# Security patches:

# -----------------

Patch23: ghostscript-cve-2013-5653.patch

Patch24: ghostscript-cve-2016-7977.patch

Patch25: ghostscript-cve-2016-7978.patch

Patch26: ghostscript-cve-2016-7979.patch

Patch27: ghostscript-cve-2016-8602.patch

Patch31: ghostscript-cve-2017-7207.patch

Patch32: ghostscript-cve-2017-8291.patch

Patch37: ghostscript-cve-2018-10194.patch

Patch38: ghostscript-cve-2018-16509.patch

Patch39: ghostscript-cve-2018-15910.patch

Patch40: ghostscript-cve-2018-16542.patch

Patch42: ghostscript-cve-2018-16511.patch

Patch43: ghostscript-cve-2018-16539.patch

Patch44: ghostscript-cve-2018-15908.patch

Patch45: ghostscript-cve-2018-15909.patch

Patch46: ghostscript-cve-2018-16863.patch

Patch48: ghostscript-cve-2018-15911.patch

Patch49: ghostscript-cve-2018-16802.patch

Patch50: ghostscript-cve-2018-19409.patch

Patch51: ghostscript-cve-2018-16541.patch

Patch52: ghostscript-cve-2018-17183.patch

Patch53: ghostscript-cve-2018-18073.patch

Patch54: ghostscript-cve-2018-17961.patch

Patch55: ghostscript-cve-2018-18284.patch

Patch56: ghostscript-cve-2018-19134.patch

Patch58: ghostscript-cve-2018-16540.patch

Patch59: ghostscript-cve-2018-19475.patch

Patch60: ghostscript-cve-2018-19476.patch

Patch61: ghostscript-cve-2018-19477.patch

Patch62: ghostscript-cve-2019-3839-part1.patch

Patch63: ghostscript-cve-2019-6116.patch

Patch64: ghostscript-cve-2019-6116-downstream.patch

Patch65: ghostscript-cve-2019-3839-part2.patch

Patch67: ghostscript-cve-2019-3835.patch

Patch68: ghostscript-cve-2019-3838.patch

# Upstream is not versioning the SONAME correctly, thus the rpmbuild is unable

# to recognize we need a newer version of lcms2. This 'hackish' workaround

# will make ghostscript to require at least the version we are built with. (bug #1436273)

%global lcms2_version %(pkg-config --modversion lcms2 2>/dev/null || echo 0)

Requires: lcms2 >= %{lcms2_version}

Requires: urw-fonts >= 1.1, ghostscript-fonts

Requires: poppler-data

BuildRequires: xz

BuildRequires: libjpeg-devel, libXt-devel

BuildRequires: zlib-devel, libpng-devel, unzip, gtk3-devel

BuildRequires: glib2-devel, gnutls-devel

# Omni requires libxml

BuildRequires: libxml2-devel

BuildRequires: libtiff-devel

BuildRequires: cups-devel >= 1.1.13

BuildRequires: libtool

BuildRequires: jasper-devel

BuildRequires: dbus-devel

BuildRequires: poppler-data

BuildRequires: lcms2-devel

BuildRequires: openjpeg-devel

%{?_with_freetype:BuildRequires: freetype-devel}

BuildRoot: %{_tmppath}/%{name}-%{gs_ver}-root

# See bug #83516.

Conflicts: ttfonts-ja < 1.2-23

Conflicts: ttfonts-ko < 1.0.11-27

Conflicts: ttfonts-zh_CN < 2.12-2

Conflicts: ttfonts-zh_TW < 2.11-20

%description

Ghostscript is a set of software that provides a PostScript

interpreter, a set of C procedures (the Ghostscript library, which

implements the graphics capabilities in the PostScript language) and

an interpreter for Portable Document Format (PDF) files. Ghostscript

translates PostScript code into many common, bitmapped formats, like

those understood by your printer or screen. Ghostscript is normally

used to display PostScript files and to print PostScript files to

non-PostScript printers.

If you need to display PostScript files or print them to

non-PostScript printers, you should install ghostscript. If you

install ghostscript, you also need to install the ghostscript-fonts

package.

%package devel

Summary: Files for developing applications that use ghostscript

Requires: %{name} = %{version}-%{release}

Group: Development/Libraries

%description devel

The header files for developing applications that use ghostscript.

%package doc

Summary: Documentation for ghostscript

Requires: %{name} = %{version}-%{release}

Group: Documentation

BuildArch: noarch

%description doc

The documentation files that come with ghostscript.

%package gtk

Summary: A GTK-enabled PostScript interpreter and renderer

Requires: %{name} = %{version}-%{release}

Group: Applications/Publishing

%description gtk

A GTK-enabled version of Ghostscript, called 'gsx'.

%package cups

Summary: CUPS filter for interpreting PostScript and PDF

Requires: %{name} = %{version}-%{release}

Requires: cups

Group: System Environment/Daemons

%description cups

CUPS filter and conversion rules for interpreting PostScript and PDF.

%prep

%setup -q -n %{name}-%{gs_ver}

rm -rf expat freetype icclib jasper jpeg lcms lcms2 libpng openjpeg zlib cups/libs

# Fix ijs-config not to have multilib conflicts (bug #192672)

%patch1 -p1 -b .multilib

# Fix some shell scripts

%patch2 -p1 -b .scripts

# Build igcref.c with -O0 to work around bug #150771.

%patch3 -p1 -b .noopt

# Define .runlibfileifexists.

%patch4 -p1

# Fixed missing error check when setting ICC profile.

%patch5 -p1 -b .icc-missing-check

# Install CUPS filter convs files in the correct place.

%patch6 -p1 -b .cups-filters

# Restored Fontmap.local patch, incorrectly dropped after

# ghostscript-8.15.4-3 (bug #610301).

# Note: don't use -b here to avoid the backup file ending up in the

# package manifest.

%patch7 -p1

# Don't assume %%rom%% device is available for initial ICC profile dir.

%patch8 -p1 -b .iccprofiles-initdir

# gdevcups: don't use uninitialized variables in debugging output.

%patch9 -p1 -b .gdevcups-debug-uninit

# Back-ported locale fix (bug #961149).

%patch10 -p1 -b .gs_sprintf

# Upstream patch to fix pdfwrite segfault (bug #962120).

%patch11 -p1 -b .pdfwrite-segfault

# Upstream patch from bug #690692 to handle strange fonts (bug #969660).

%patch12 -p1 -b .strange-fonts

# Use more caution when converting floats to strings (bug #980085).

%patch13 -p1 -b .wrf-snprintf

# Use correct colord device ID in gstoraster.

%patch14 -p1 -b .cups-colord

# Upstream patch from bug #693921 to avoid zfapi crash (bug #969785).

%patch15 -p1 -b .zfapi-crash

# Tweak filter costs for gstoraster (part of bug #998977).

%patch16 -p1 -b .gstoraster-costs

# Fix insufficient integer digits in trio's rendering of "%g" (bug #1096158).

%patch17 -p1 -b .trio-g

# Prevent memory handling crash (bug #1105519).

%patch18 -p1 -b .crash

# Prevent crashing when opening a .ps file followed by another (bug #959351)

%patch19 -p1 -b .import-lcms2-2.6-changes

# Fix ghostscript hanging indefinitely when converting PDF -> PNG (bug #1302121)

%patch20 -p1

# Do not SIGSEGV after icc_profile error, report error instead (bug #1243784)

%patch21 -p1

# Fix the color printing on HP InkJet printers (bug #1225858)

%patch22 -p1

# getenv and filenameforall: do not ignore -dSAFER (bug #1380327)

%patch23 -p1

# .libfile: honor -dSAFER (bug #1380415)

%patch24 -p1

# Avoid reference leak in .setdevice (bug #1382300)

%patch25 -p1

# DSC parser - validate parameters (bug #1382305)

%patch26 -p1

# check for sufficient params in .sethalftone5 (bug #1383940)

%patch27 -p1

# Fix of SIGSEGV when processing GlyphDirectory (bug #1390847)

%patch28 -p1

# Fix .locksafe [fixes regression from previous CVE fixes](bug #1411725)

%patch29 -p1

# Fix infinite 'for' loop in gdevp14.c file (bug #1424752)

%patch30 -p1

# Check for null-pointer dereference in mem_get_bits_rectangle() (bug #1435546):

%patch31 -p1

# Fix for corruption of operand stack (bug #1446063):

%patch32 -p1

# Cope with negative run length in CCITT Fax decode (bug #1473337):

%patch33 -p1

# Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852):

%patch34 -p1

# Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782):

%patch35 -p1

# Allow more than 11 elements in array for setdash (bug #1432209):

%patch36 -p1

# CVE-2018-10194 (bug #1569819):

%patch37 -p1

# CVE-2018-16509 (bug #1621158):

%patch38 -p1

# CVE-2018-15910 (bug #1621160):

%patch39 -p1

# CVE-2018-16542 (bug #1621382):

%patch40 -p1

# Remove as many non-standard operators as possible to make the codebase

# closer to upstream for later CVEs:

%patch41 -p1

# CVE-2018-16511 (bug #1621383):

%patch42 -p1

# CVE-2018-16539 (bug #1649721):

%patch43 -p1

# CVE-2018-15908 (bug #1621159):

%patch44 -p1

# CVE-2018-15909 (bug #1621381):

%patch45 -p1

# CVE-2018-16863 (bug #1652901):

%patch46 -p1

# ghostscript update breaks xdvi (gs: Error: /undefined in flushpage) (bug #1654290):

%patch47 -p1

# CVE-2018-15911 (bug #1651149):

%patch48 -p1

# CVE-2018-16802 (bug #1650060):

%patch49 -p1

# CVE-2018-19409 (bug #1652935):

%patch50 -p1

# CVE-2018-16541 (bug #1654621):

%patch51 -p1

# CVE-2018-17183 (bug #1650210):

%patch52 -p1

# CVE-2018-18073 (bug #1645516):

%patch53 -p1

# CVE-2018-17961 (bug #1648891):

%patch54 -p1

# CVE-2018-18284 (bug #1643115):

%patch55 -p1

# CVE-2018-19134 (bug #1655937):

%patch56 -p1

# pdf2ps reports an error when reading from stdin (bug #1665919):

%patch57 -p1

# CVE-2018-16540 (bug #1657333):

%patch58 -p1

# CVE-2018-19475 (bug #1660569):

%patch59 -p1

# CVE-2018-19476 (bug #1660828):

%patch60 -p1

# CVE-2018-19477 (bug #1661278):

%patch61 -p1

# CVE-2019-3839 part1 (bug #1673398):

%patch62 -p1

# CVE-2019-6116 (bug #1667442):

%patch63 -p1

# CVE-2019-6116 downstream changes (bug #1667442):

%patch64 -p1

# CVE-2019-3839 part2 (bug #1673398):

%patch65 -p1

# ghostscript: Regression: double comment chars '%%' in gs_init.ps

# leading to missing metadata (bug #1673915):

%patch66 -p1

# CVE-2019-3835 (bug #1678171):

%patch67 -p1

# CVE-2019-3838 (bug #1680025):

%patch68 -p1

# fix for pdf2dsc regression to allow fix for CVE-2019-3839

# https://bugs.ghostscript.com/show_bug.cgi?id=700704

%patch69 -p1

# Remove pdfopt man pages which were mistakenly left in (bug #963882).

rm man/{de/,}pdfopt.1

# Convert manual pages to UTF-8

from8859_1() {

        iconv -f iso-8859-1 -t utf-8 < "$1" > "${1}_"

        mv "${1}_" "$1"

}

for i in man/de/*.1; do

  if [ "$(file --brief --mime-encoding "$i")" = iso-8859-1 ]; then

    from8859_1 "$i"

  fi

done

# Convert ps files to UTF-8

for i in examples/cjk/gsc*.ps; do from8859_1 "$i"; done

%build

# Compile without strict aliasing opts due to these files:

# gdevescv.c gdevl4v.c gdevopvp.c gdevbbox.c gdevdbit.c gdevddrw.c 

# gdevp14.c gdevpdfd.c gdevpdfi.c gdevpdfo.c gdevpdft.c gdevpdfv.c 

# gdevpdte.c gdevpdtt.c gdevps.c gdevpx.c gscoord.c gscparam.c gscrd.c 

# gsdps1.c gsimage.c gspath1.c gsptype1.c gsptype2.c gstype2.c 

# gstype42.c gxccache.c gxchar.c gxclimag.c gxclpath.c gxfcopy.c 

# gximag3x.c gximage3.c gxipixel.c gxshade1.c gxstroke.c gxtype1.c 

# ibnum.c iscanbin.c zchar1.c zchar.c zcharx.c zfapi.c zfont32.c 

# zfunc0.c zfunc3.c zfunc4.c zpcolor.c zshade.c

EXTRACFLAGS="-fno-strict-aliasing"

FONTPATH=

for path in \

        %{_datadir}/fonts/default/%{name} \

        %{_datadir}/fonts/default/Type1 \

        %{_datadir}/fonts/default/amspsfnt/pfb \

        %{_datadir}/fonts/default/cmpsfont/pfb \

        %{_datadir}/fonts \

        %{_datadir}/%{name}/conf.d \

        %{_sysconfdir}/%{name} \

        %{_sysconfdir}/%{name}/%{gs_dot_ver} \

        %{_datadir}/poppler/cMap/*

do

  FONTPATH="$FONTPATH${FONTPATH:+:}$path"

done

autoconf --force

%configure --with-ijs --enable-dynamic --with-fontpath="$FONTPATH" \

        --with-drivers=ALL --disable-compile-inits --with-system-libtiff \

        --with-install-cups \

        CFLAGS="$CFLAGS $EXTRACFLAGS"

# Build IJS

cd ijs

./autogen.sh

%configure --enable-shared --disable-static

make

cd ..

%if %{build_with_freetype}

FT_CFLAGS=$(pkg-config --cflags freetype2)

make so RPM_OPT_FLAGS="$RPM_OPT_FLAGS $EXTRACFLAGS" prefix=%{_prefix} \

        FT_BRIDGE=1 FT_CFLAGS="$FT_CFLAGS" FT_LIB=freetype

make RPM_OPT_FLAGS="$RPM_OPT_FLAGS $EXTRACFLAGS" prefix=%{_prefix} \

        FT_BRIDGE=1 FT_CFLAGS="$FT_CFLAGS" FT_LIB=freetype

%else

make so RPM_OPT_FLAGS="$RPM_OPT_FLAGS $EXTRACFLAGS" prefix=%{_prefix}

make RPM_OPT_FLAGS="$RPM_OPT_FLAGS $EXTRACFLAGS" prefix=%{_prefix}

%endif

make cups

%install

rm -rf $RPM_BUILD_ROOT

mkdir -p $RPM_BUILD_ROOT

mkdir -p $RPM_BUILD_ROOT/{%{_mandir},%{_bindir},%{_datadir},%{_docdir}}

mkdir -p $RPM_BUILD_ROOT/{%{_libdir},%{_includedir}/ijs}

make install soinstall \

%{?_with_freetype:FT_BRIDGE=1} \

        prefix=$RPM_BUILD_ROOT%{_prefix} \

        mandir=$RPM_BUILD_ROOT%{_mandir} \

        datadir=$RPM_BUILD_ROOT%{_datadir} \

        gsincludedir=$RPM_BUILD_ROOT%{_includedir}/ghostscript/ \

        bindir=$RPM_BUILD_ROOT%{_bindir} \

        libdir=$RPM_BUILD_ROOT%{_libdir} \

        docdir=$RPM_BUILD_ROOT%{_docdir}/%{name}-%{gs_dot_ver} \

        gsdir=$RPM_BUILD_ROOT%{_datadir}/%{name} \

        gsdatadir=$RPM_BUILD_ROOT%{_datadir}/%{name}/%{gs_dot_ver} \

        gssharedir=$RPM_BUILD_ROOT%{_libdir}/%{name}/%{gs_dot_ver} \

        CUPSSERVERROOT=$RPM_BUILD_ROOT`cups-config --serverroot` \

        CUPSSERVERBIN=$RPM_BUILD_ROOT`cups-config --serverbin` \

        CUPSDATA=$RPM_BUILD_ROOT`cups-config --datadir`

mv -f $RPM_BUILD_ROOT%{_bindir}/gsc $RPM_BUILD_ROOT%{_bindir}/gs

cd ijs

%makeinstall

cd ..

echo ".so man1/gs.1" > $RPM_BUILD_ROOT/%{_mandir}/man1/ghostscript.1

ln -sf gs $RPM_BUILD_ROOT%{_bindir}/ghostscript

# Rename an original cidfmap to cidfmap.GS

mv $RPM_BUILD_ROOT%{_datadir}/%{name}/%{gs_dot_ver}/Resource/Init/cidfmap{,.GS}

# Install our own cidfmap to allow the separated

# cidfmap which the font packages own.

install -m0644 %{SOURCE2} $RPM_BUILD_ROOT%{_datadir}/%{name}/%{gs_dot_ver}/Resource/Init/CIDFnmap

install -m0644 %{SOURCE4} $RPM_BUILD_ROOT%{_datadir}/%{name}/%{gs_dot_ver}/Resource/Init/cidfmap

# Documentation

install -m0644 doc/COPYING $RPM_BUILD_ROOT%{_docdir}/%{name}-%{gs_dot_ver}

# Don't ship libtool la files.

rm -f $RPM_BUILD_ROOT%{_libdir}/libijs.la

# Don't ship ijs example client or server

rm -f $RPM_BUILD_ROOT%{_bindir}/ijs_{client,server}_example

# Don't ship URW fonts; we already have them.

rm -rf $RPM_BUILD_ROOT%{_datadir}/ghostscript/%{gs_dot_ver}/Resource/Font

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/ghostscript/%{gs_dot_ver}

touch $RPM_BUILD_ROOT%{_sysconfdir}/ghostscript/%{gs_dot_ver}/Fontmap.local

touch $RPM_BUILD_ROOT%{_sysconfdir}/ghostscript/%{gs_dot_ver}/cidfmap.local

touch $RPM_BUILD_ROOT%{_sysconfdir}/ghostscript/%{gs_dot_ver}/CIDFnmap.local

# The man/de/man1 symlinks are broken (bug #66238).

find $RPM_BUILD_ROOT%{_mandir}/de/man1 -type l | xargs rm -f

# Don't ship fixmswrd.pl as it pulls in perl (bug #463948).

rm -f $RPM_BUILD_ROOT%{_bindir}/fixmswrd.pl

# Don't ship CMaps (instead poppler-data paths are in search path).

rm -f $RPM_BUILD_ROOT%{_datadir}/ghostscript/%{gs_dot_ver}/Resource/CMap/*

MAIN_PWD=`pwd`

(cd $RPM_BUILD_ROOT; find .%{_datadir}/ghostscript/%{gs_dot_ver}/Resource -type f | \

                sed -e 's/\.//;' | grep -v Fontmap | grep -v gs_init.ps > $MAIN_PWD/rpm.sharelist

 find .%{_bindir}/ | sed -e 's/\.//;' | \

                grep -v '/$\|/hpijs$\|/gsx$\|/ijs-config$' \

                >> $MAIN_PWD/rpm.sharelist)

%clean

rm -rf $RPM_BUILD_ROOT

%post -p /sbin/ldconfig

%postun -p /sbin/ldconfig

%files -f rpm.sharelist

%defattr(-,root,root)

%dir %{_sysconfdir}/ghostscript

%dir %{_sysconfdir}/ghostscript/%{gs_dot_ver}

%dir %{_datadir}/ghostscript/%{gs_dot_ver}

%dir %{_datadir}/ghostscript/%{gs_dot_ver}/Resource

%dir %{_datadir}/ghostscript/%{gs_dot_ver}/Resource/Init

%config %{_datadir}/ghostscript/%{gs_dot_ver}/Resource/Init/gs_init.ps

%config %{_datadir}/ghostscript/%{gs_dot_ver}/Resource/Init/Fontmap*

%dir %{_datadir}/ghostscript/%{gs_dot_ver}/Resource/CMap

%dir %{_datadir}/ghostscript/%{gs_dot_ver}/Resource/CIDFont

%dir %{_datadir}/ghostscript/%{gs_dot_ver}/Resource/CIDFSubst

%dir %{_datadir}/ghostscript/%{gs_dot_ver}/Resource/ColorSpace

%dir %{_datadir}/ghostscript/%{gs_dot_ver}/Resource/Decoding

%dir %{_datadir}/ghostscript/%{gs_dot_ver}/Resource/Encoding

%dir %{_datadir}/ghostscript/%{gs_dot_ver}/Resource/SubstCID

%{_datadir}/ghostscript/%{gs_dot_ver}/lib

%{_datadir}/ghostscript/%{gs_dot_ver}/iccprofiles

%{_mandir}/man*/*

%lang(de) %{_mandir}/de/man*/*

%{_libdir}/libgs.so.*

%{_libdir}/libijs-*.so*

%dir %{_libdir}/%{name}

%{_libdir}/%{name}/%{gs_dot_ver}

%config(noreplace) %{_sysconfdir}/ghostscript/%{gs_dot_ver}/*

%files doc

%defattr(-,root,root)

%doc %{_datadir}/ghostscript/%{gs_dot_ver}/examples

%doc %{_docdir}/%{name}-%{gs_dot_ver}

%files gtk

%defattr(-,root,root)

%{_bindir}/gsx

%files cups

%defattr(-,root,root)

%{_datadir}/cups/model/pxl*

%{_datadir}/cups/mime/*.convs

%{_cups_serverbin}/filter/*

%files devel

%defattr(-,root,root)

%dir %{_includedir}/ghostscript

%{_includedir}/ghostscript/*.h

%dir %{_includedir}/ijs

%{_includedir}/ijs/*

%{_bindir}/ijs-config

%{_libdir}/pkgconfig/ijs.pc

%{_libdir}/libijs.so

%{_libdir}/libgs.so

%changelog

* Thu Mar 21 2019 Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.11

- Resolves: #1673398 - CVE-2019-3839 ghostscript: missing attack vector

  protections for CVE-2019-6116

- fix for pdf2dsc regression added

* Tue Jan 29 2019 Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.10

- Resolves: #1673915 - ghostscript: Regression: double comment chars

  '%%' in gs_init.ps leading to missing metadata

- Resolves: #1678171 - CVE-2019-3835 ghostscript: superexec operator

  is available (700585)

- Resolves: #1680025 - CVE-2019-3838 ghostscript: forceput in DefineResource

  is still accessible (700576)

* Thu Jan 24 2019 Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.9

- Related: #1667442 - CVE-2019-6116 - added missing parts of patch

* Fri Jan 18 2019 Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.8

- Resolves: #1667442 - CVE-2019-6116 ghostscript: subroutines within

  pseudo-operators must themselves be pseudo-operators

* Thu Dec 20 2018 Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.7

- Resolves: #1665919 pdf2ps reports an error when reading from stdin

- Resolves: #1657333 - CVE-2018-16540 ghostscript: use-after-free in

  copydevice handling (699661)

- Resolves: #1660569 - CVE-2018-19475 ghostscript: access bypass in

  psi/zdevice2.c (700153)

- Resolves: #1660828 - CVE-2018-19476 ghostscript: access bypass in

  psi/zicc.c

- Resolves: #1661278 - CVE-2018-19477 ghostscript: access bypass in

  psi/zfjbig2.c (700168)

* Mon Dec 10 2018 Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.6

- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect

  smooth shading object (Error: /rangecheck in --run--) 

* Wed Dec 05 2018 Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.5

- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in

  pagedevice replacement (699664)

- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error

  exception table

- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks

  can leak operator arrays

- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks

  can leak operator arrays (incomplete fix for CVE-2018-17183)

- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator

  allows a sandbox protection bypass

- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in

  setpattern (700141)

* Thu Nov 29 2018 Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.4

- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory

  access in the aesdecode operator (699665)

- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of

  privilege" checking when running out of stack during exception handling

- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented

  security check in zsetdevice function in psi/zdevice.c

* Wed Nov 28 2018 Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.3

- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)

* Mon Nov 26 2018 Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.2

- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for

  CVE-2018-16509

* Wed Nov 14 2018 Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.1

- Remove as many non-standard operators as possible to make the codebase

  closer to upstream for later CVEs

- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type

  checker (699659)

- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking

  in temp file handling to disclose contents of files (699658) 

- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission

  issues (699657)

- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete

  type checking (699660)

* Mon Sep 10 2018 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-31

- Added security fixes for:

  - CVE-2018-16509 (bug #1621158)

  - CVE-2018-15910 (bug #1621160)

  - CVE-2018-16542 (bug #1621382)

* Tue Apr 17 2018 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-30

- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)

* Tue Jul 25 2017 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-29

- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)

- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)

* Thu May 11 2017 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-28

- Security fix for CVE-2017-8291 updated to address SIGSEGV

* Wed May 03 2017 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-27

- Added security fix for CVE-2017-8291 (bug #1446063)

* Tue Apr 11 2017 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-26

- Updated requirements for lcms2 to avoid possible issues in the future

* Thu Apr 06 2017 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-25

- Added security fix for CVE-2017-7207 (bug #1434353)

- Added explicit requirement for lcms2 version we are build with (bug #1436273)

* Tue Mar 21 2017 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-24

- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)

* Wed Feb 15 2017 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-23

- Fix for regression caused by previous CVE fixes (bug #1411725)

* Tue Jan 10 2017 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-22

- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)

* Thu Nov  3 2016 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-21

- Added security fixes for:

  - CVE-2013-5653 (bug #1380327)

  - CVE-2016-7977 (bug #1380415)

  - CVE-2016-7978 (bug #1382300)

  - CVE-2016-7979 (bug #1382305)

  - CVE-2016-8602 (bug #1383940)

* Wed Jul 13 2016 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-20

- Fixed some complains of CovScan in ghostscript-hanging-in-convert.patch

* Thu Jun  2 2016 David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-19

- Import LCMS2 2.6 rebase changes into ghostscript (bug #959351)

- Fix hanging of ghostscript when converting PDF -> PNG (bug #1302121)

- Do not SIGSEGV after icc_profile error, report error instead (bug #1243784)

- Fix the color printing on HP InkJet printers (bug #1225858)