<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-extended/ghostscript, branch styhead</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=styhead</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=styhead'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2024-12-17T20:58:11+00:00</updated>
<entry>
<title>ghostscript: upgrade 10.03.1 -&gt; 10.04.0</title>
<updated>2024-12-17T20:58:11+00:00</updated>
<author>
<name>Hitendra Prajapati</name>
<email>hprajapati@mvista.com</email>
</author>
<published>2024-12-05T23:28:38+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=6d7266c511b53a823b0ebe6aadf68cb02e1bec66'/>
<id>urn:sha1:6d7266c511b53a823b0ebe6aadf68cb02e1bec66</id>
<content type='text'>
avoid-host-contamination.patch
refreshed for 10.04.0

Changelog:
===========
- addresses CVEs: CVE-2024-46951, CVE-2024-46952, CVE-2024-46953, CVE-2024-46954, CVE-2024-46955, CVE-2024-46956
- add protection for device selection from PostScript input.
- efforts in code hygiene and maintainability continue.
- The usual round of bug fixes, compatibility changes, and incremental improvements.
- add the capability to build with the Tesseract OCR engine.

(From OE-Core rev: a0c802e9b1d8400589aede20e52f40d10a344314)

(From OE-Core rev: 067e769ada6c8cd5783c6d32f24cea9f0e4ed666)

Signed-off-by: Wang Mingyu &lt;wangmy@fujitsu.com&gt;
Signed-off-by: Hitendra Prajapati &lt;hprajapati@mvista.com&gt;
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
Signed-off-by: Peter Marko &lt;peter.marko@siemens.com&gt;
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
</content>
</entry>
<entry>
<title>ghostscript: upgrade 10.03.0 -&gt; 10.03.1</title>
<updated>2024-05-30T08:04:14+00:00</updated>
<author>
<name>Changqing Li</name>
<email>changqing.li@windriver.com</email>
</author>
<published>2024-05-27T01:37:03+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=8f741e6237574acb1e5bf75475d05bc59f4c6550'/>
<id>urn:sha1:8f741e6237574acb1e5bf75475d05bc59f4c6550</id>
<content type='text'>
Patch release to address security bugs:
CVE-2024-33869
CVE-2023-52722
CVE-2024-33870
CVE-2024-33871
CVE-2024-29510

(From OE-Core rev: 9a424fbcdc0c792ff3b99bf0e8a5e380582f53bc)

Signed-off-by: Changqing Li &lt;changqing.li@windriver.com&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>ghostscript: upgrade 10.02.1 -&gt; 10.03.0</title>
<updated>2024-04-16T07:07:01+00:00</updated>
<author>
<name>Wang Mingyu</name>
<email>wangmy@fujitsu.com</email>
</author>
<published>2024-03-13T07:08:03+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=f184b3270051c97ebc9dc3cc3c2402c0c2a84ba7'/>
<id>urn:sha1:f184b3270051c97ebc9dc3cc3c2402c0c2a84ba7</id>
<content type='text'>
avoid-host-contamination.patch
refreshed for 10.03.0

configure.ac-add-option-to-explicitly-disable-neon.patch
removed since it's included in 10.03.0

(From OE-Core rev: 0e389b7b20cf77327127ae0ced856e2b2ec7aee2)

Signed-off-by: Wang Mingyu &lt;wangmy@fujitsu.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>meta: Update CVE_STATUS for incorrect cpes</title>
<updated>2024-02-24T16:10:23+00:00</updated>
<author>
<name>Simone Weiß</name>
<email>simone.p.weiss@posteo.com</email>
</author>
<published>2024-02-18T22:32:32+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=2bcd651a0871a2a3789c2f2907cb372ad45d9b14'/>
<id>urn:sha1:2bcd651a0871a2a3789c2f2907cb372ad45d9b14</id>
<content type='text'>
Set CVE_STATUS as none of the issues apply against the versions
used in the recipes.

(From OE-Core rev: cea8c8bf73e84133f566d1c2ca0637494f2d7afe)

Signed-off-by: Simone Weiß &lt;simone.p.weiss@posteo.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>ghostscript: correct LICENSE with AGPLv3</title>
<updated>2024-02-08T10:59:06+00:00</updated>
<author>
<name>Kai Kang</name>
<email>kai.kang@windriver.com</email>
</author>
<published>2024-02-07T08:08:23+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=2d4d362de10479004990e89ae9e72bd48a752dfb'/>
<id>urn:sha1:2d4d362de10479004990e89ae9e72bd48a752dfb</id>
<content type='text'>
The license of ghostscript has switched to Affero GPL since version 9.07
via commit:

* 3cc5318 Switch Ghostscript/GhostPDL to Affero GPL

https://github.com/ArtifexSoftware/ghostpdl/commit/3cc5318

Correct it with `AGPL-3.0-or-later`.

(From OE-Core rev: 7dec33a8026d9aa96177060b13bb63d74eeb4855)

Signed-off-by: Kai Kang &lt;kai.kang@windriver.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>ghostscript: Build and install shared lib</title>
<updated>2023-11-13T11:38:03+00:00</updated>
<author>
<name>Markus Volk</name>
<email>f_l_k@t-online.de</email>
</author>
<published>2023-11-12T12:08:09+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=9d830bb2ea43c5954b61b233aafae7e1ce89469d'/>
<id>urn:sha1:9d830bb2ea43c5954b61b233aafae7e1ce89469d</id>
<content type='text'>
libgs is eg. needed to build ghostscript support for gimp

also install the data target

(From OE-Core rev: cedd211d8b73076d1ef6f32af1c59e87a436d637)

Signed-off-by: Markus Volk &lt;f_l_k@t-online.de&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>ghostscript: upgrade 10.02.0 -&gt; 10.02.1</title>
<updated>2023-11-05T11:28:41+00:00</updated>
<author>
<name>Wang Mingyu</name>
<email>wangmy@fujitsu.com</email>
</author>
<published>2023-11-03T07:19:52+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=721818f75fc41450a83be3bebce6c51ab86edd79'/>
<id>urn:sha1:721818f75fc41450a83be3bebce6c51ab86edd79</id>
<content type='text'>
(From OE-Core rev: 9492c2d51a08fbd4c107540a5a833b1a3fb70504)

Signed-off-by: Wang Mingyu &lt;wangmy@fujitsu.com&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>ghostscript: upgrade 10.01.2 -&gt; 10.02.0</title>
<updated>2023-09-26T09:35:27+00:00</updated>
<author>
<name>Alexander Kanavin</name>
<email>alex.kanavin@gmail.com</email>
</author>
<published>2023-09-22T07:24:08+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=52669a67b1c9ddd908f0fa96ff801a8aa3056623'/>
<id>urn:sha1:52669a67b1c9ddd908f0fa96ff801a8aa3056623</id>
<content type='text'>
(From OE-Core rev: e705edc553fa57361cb948ec7923b261f373f385)

Signed-off-by: Alexander Kanavin &lt;alex@linutronix.de&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>ghostscript: avoid neon on unsupported machines</title>
<updated>2023-09-05T07:09:13+00:00</updated>
<author>
<name>Benjamin Bara</name>
<email>benjamin.bara@skidata.com</email>
</author>
<published>2023-09-04T15:28:18+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=75335fc2ee03558e36550b4bb378d172aaae04ca'/>
<id>urn:sha1:75335fc2ee03558e36550b4bb378d172aaae04ca</id>
<content type='text'>
Disable neon if the machine does not support it.

(From OE-Core rev: 22d40fcb984849bc8735bf03b306c3a3b11eb779)

Signed-off-by: Benjamin Bara &lt;benjamin.bara@skidata.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>ghostscript: ignore CVE-2023-38560</title>
<updated>2023-08-09T20:48:11+00:00</updated>
<author>
<name>Ross Burton</name>
<email>ross.burton@arm.com</email>
</author>
<published>2023-08-07T16:56:56+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=e6eb5402362bd4b3743e479a0ff21a67739f8873'/>
<id>urn:sha1:e6eb5402362bd4b3743e479a0ff21a67739f8873</id>
<content type='text'>
The ghostscript recipe isn't vulnerable to CVE-2023-38560, as this is an
issue in the GhostPCL release, whereas this recipe is the Ghostscript
release.

(From OE-Core rev: f82a13beabc784da1455f86064ce9f0f225b6e5a)

Signed-off-by: Ross Burton &lt;ross.burton@arm.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
