linux/poky.git/meta/recipes-extended/ghostscript, branch nanbield

ghostscript: upgrade 10.02.0 -> 10.02.1

2023-12-22T15:23:26+00:00

upgrade include CVE-2023-46751. (cherry pick from Oe-Core rev: 9492c2d51a08fbd4c107540a5a833b1a3fb70504 ) (From OE-Core rev: a26c9acc8a853bfa13f08916c596a52da26088e4) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni Signed-off-by: Lee Chee Yang Signed-off-by: Steve Sakoman

ghostscript: upgrade 10.01.2 -> 10.02.0

2023-09-26T09:35:27+00:00

(From OE-Core rev: e705edc553fa57361cb948ec7923b261f373f385) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

ghostscript: avoid neon on unsupported machines

2023-09-05T07:09:13+00:00

Disable neon if the machine does not support it. (From OE-Core rev: 22d40fcb984849bc8735bf03b306c3a3b11eb779) Signed-off-by: Benjamin Bara Signed-off-by: Richard Purdie

ghostscript: ignore CVE-2023-38560

2023-08-09T20:48:11+00:00

The ghostscript recipe isn't vulnerable to CVE-2023-38560, as this is an issue in the GhostPCL release, whereas this recipe is the Ghostscript release. (From OE-Core rev: f82a13beabc784da1455f86064ce9f0f225b6e5a) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

ghostscript: backport fix for CVE-2023-38559

2023-08-09T20:48:11+00:00

(From OE-Core rev: 38478a82598260e5e0616598e8cf78416dac1867) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

ghostscript: advance to version 10.01.2

2023-07-14T16:31:05+00:00

Fix CVE-2023-28879 and CVE-2023-36664. (From OE-Core rev: 7a66d238af8545dfb9a79e551ccaac889b2d52dd) Signed-off-by: Joe Slater Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

ghostscript: remove CVE_CHECK_IGNORE for CVE-2013-6629

2023-06-29T09:59:56+00:00

This CVE now has a version range, indicating that this Ghostscript release isn't vulnerable. (From OE-Core rev: da6d0763a7fb9c7a322bf5964f8abdf6bed7e219) Signed-off-by: Ross Burton Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

ghostscript: mostly rewrite recipe

2023-06-20T22:24:26+00:00

This started as a patch cleanup but escalated rapidly. Remove unneeded patches: - mkdir-p.patch isn't needed now the Makefiles appear to have the correct dependencies. - ghostscript-9.15-parallel-make.patch appears to be unneeded for the same reason - base-genht.c-add-a-preprocessor-define-to-allow-fope.patch isn't needed - cups-no-gcrypt.patch isn't needed - do-not-check-local-libpng-source.patch can be replaced by deleting the libpng/ directory, as is already done for jpeg/ - ghostscript-9.21-native-fix-disable-system-libtiff.patch is not needed when we stop doing native builds (see below) Remove the need for ghostscript-native to build and install tools that are needed at target build-time: ghostscript can do this itself. Remove the BBCLASSEXTEND and all of the native overrides. Inherit pkgconfig and explicitly tell configure to use the pkgconfig binary: unless told otherwise this configure will refuse to use an unprefixed pkgconfig in cross builds. Review DEPENDS and add missing freetype and zlib dependencies. Ghostcript will use the embedded copies of libraries over system libraries, so extend the deletion of jpeg and libpng to include expat, freetype, and cups as we want to link to our build of those. We can't delete zlib as it is explicitly used when building the native tools. Add PACKAGECONFIGs for optional libidn and libpaper dependencies. Remove HAVE_SYS_TIME_H assignments, the upstream bug was fixed in 2011. Clean up comments: there's no need to explain how to use PACKAGECONFIG, and justify the use of autotools-brokensep. (From OE-Core rev: b62e6d676ce2075a52eea729957f186cfb3bd42b) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

ghostscript: upgrade to 10.01.1

2023-06-06T06:41:42+00:00

Drop the merged fix for CVE-2023-28879. (From OE-Core rev: 659b0cf41db00420366d0eca103f16922c2c5d72) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

ghostscript: fix CVE-2023-28879

2023-05-05T10:07:25+00:00

Backport from tag ghostpdl-10.01.1-gse-10174 which is after 10.01.1. (From OE-Core rev: 8a70d6935afa38173dbf012b8e1c3d59228504df) Signed-off-by: Joe Slater Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie