diff --git a/ghostscript-10.01.2.tar.xz b/ghostscript-10.02.1.tar.xz similarity index 83% rename from ghostscript-10.01.2.tar.xz rename to ghostscript-10.02.1.tar.xz index bb511190fb27c9cd9ad3e043b332c8da1a663c64..54364a456a2a57d31e02d57719a54ce6edb02e3d 100644 Binary files a/ghostscript-10.01.2.tar.xz and b/ghostscript-10.02.1.tar.xz differ diff --git a/ghostscript-CVE-2023-38559.patch b/ghostscript-CVE-2023-38559.patch deleted file mode 100644 index e0a7bdd0713e8ce0d85c8567b69ef4e586b57406..0000000000000000000000000000000000000000 --- a/ghostscript-CVE-2023-38559.patch +++ /dev/null @@ -1,27 +0,0 @@ -From d81b82c70bc1fb9991bb95f1201abb5dea55f57f Mon Sep 17 00:00:00 2001 -From: Chris Liddell -Date: Mon, 17 Jul 2023 14:06:37 +0100 -Subject: [PATCH] Bug 706897: Copy pcx buffer overrun fix from - devices/gdevpcx.c - -Bounds check the buffer, before dereferencing the pointer. ---- - base/gdevdevn.c | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/base/gdevdevn.c b/base/gdevdevn.c -index 7b14d9c71..6351fb77a 100644 ---- a/base/gdevdevn.c -+++ b/base/gdevdevn.c -@@ -1983,7 +1983,7 @@ devn_pcx_write_rle(const byte * from, const byte * end, int step, gp_file * file - byte data = *from; - - from += step; -- if (data != *from || from == end) { -+ if (from >= end || data != *from) { - if (data >= 0xc0) - gp_fputc(0xc1, file); - } else { --- -2.34.1 - diff --git a/ghostscript.spec b/ghostscript.spec index 11a7ce0035b17c845919fe256cb0c200bf805b62..91edba6d398a590186737b2623400dcff3487c8a 100644 --- a/ghostscript.spec +++ b/ghostscript.spec @@ -1,4 +1,4 @@ -%define anolis_release 2 +%define anolis_release 1 %global _hardened_build 1 %global _docdir_fmt %{name} @@ -9,7 +9,7 @@ Name: ghostscript Summary: Interpreter for PostScript language & PDF -Version: 10.01.2 +Version: 10.02.1 Release: %{anolis_release}%{?dist} License: AGPLv3+ URL: https://ghostscript.com/ @@ -32,7 +32,6 @@ Provides: ghostscript-core = %{version}-%{release} Obsoletes: ghostscript-core < 9.53.3-6 Patch0: ghostscript-10.01.0-fix-linkage.patch -Patch1: ghostscript-CVE-2023-38559.patch %description Ghostscript is an interpreter for PostScript® and Portable Document Format (PDF) files. @@ -153,11 +152,15 @@ done install -m 0755 -d %{buildroot}%{_datadir}/%{name}/conf.d/ +%generate_compatibility_deps + %files -n libgs %license LICENSE doc/COPYING %dir %{_datadir}/%{name}/conf.d/ %{_libdir}/libgs.so.* +%dir %{abidir} +%{abidir}/*.dump %{_datadir}/%{name}/ @@ -168,11 +171,14 @@ install -m 0755 -d %{buildroot}%{_datadir}/%{name}/conf.d/ %files %{_bindir}/gs +%{abidir}/gs-option.list %{_bindir}/gsnd +%{abidir}/gsnd-option.list %{_bindir}/ghostscript %{_bindir}/eps2* %{_bindir}/pdf2* %{_bindir}/ps2* +%{abidir}/ps2*-option.list %{_mandir}/man1/gs.1* %{_mandir}/man1/gsnd* %{_mandir}/man1/ghostscript* @@ -185,7 +191,6 @@ install -m 0755 -d %{buildroot}%{_datadir}/%{name}/conf.d/ %{_bindir}/dvipdf %{_mandir}/man1/dvipdf* - %files tools-fonts %{_bindir}/pf2afm %{_bindir}/pfbtopfa @@ -210,6 +215,7 @@ install -m 0755 -d %{buildroot}%{_datadir}/%{name}/conf.d/ %files gtk %{_bindir}/gsx +%{abidir}/gsx-option.list %files x11 @@ -221,6 +227,9 @@ install -m 0755 -d %{buildroot}%{_datadir}/%{name}/conf.d/ %changelog +* Sun Nov 05 2023 Funda Wang - 10.02.1-1 +- New version 10.02.1 + * Tue Aug 8 2023 Funda Wang - 10.01.2-2 - Fix CVE-2023-38559