New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
ghostscript: 9.24 -> 9.25 #47934
ghostscript: 9.24 -> 9.25 #47934
Conversation
Highlights in this release include: This release fixes problems with argument handling, some unintended results of the security fixes to the SAFER file access restrictions (specifically accessing ICC profile files), and some additional security issues over the recent 9.24 release. CVE-2018-16802 CVE-2018-17183 Note: The ps2epsi utility does not, and cannot call Ghostscript with the -dSAFER command line option. It should never be called with input from untrusted sources. Security issues have been the primary focus of this release, including solving several (well publicised) real and potential exploits. PLEASE NOTE: We strongly urge users to upgrade to this latest release to avoid these issues. As well as Ghostscript itself, jbig2dec has had a significant amount of work improving its robustness in the face of out specification files. IMPORTANT: We are in the process of forking LittleCMS. LCMS2 is not thread safe, and cannot be made thread safe without breaking the ABI. Our fork will be thread safe, and include performance enhancements (these changes have all be been offered and rejected upstream). We will maintain compatibility between Ghostscript and LCMS2 for a time, but not in perpetuity. Our fork will be available as its own package separately from Ghostscript (and MuPDF). The usual round of bug fixes, compatibility changes, and incremental improvements.
Success on aarch64-linux (full log) Attempted: ghostscript Partial log (click to expand)
|
Success on x86_64-linux (full log) Attempted: ghostscript Partial log (click to expand)
|
Success on x86_64-darwin (full log) Attempted: ghostscript Partial log (click to expand)
|
@GrahamcOfBorg test printing |
Success on x86_64-linux (full log) Attempted: tests.printing Partial log (click to expand)
|
Success on aarch64-linux (full log) Attempted: tests.printing Partial log (click to expand)
|
@flokli oops, when backporting I realized that I missed something: you didn't update the sha512 (maybe that's why the docs are still in the 9.24 folder). Please have a look. |
sorry, my bad. PR fixing this is at #47946. |
Changelog:
Motivation for this change
Things done
sandbox
innix.conf
on non-NixOS)nix-shell -p nox --run "nox-review wip"
./result/bin/
)nix path-info -S
before and after)